Three of the vulnerabilities to be addresses are rated "critical," three are rated "important," and one is rated "moderate."
The "important" flaws affect Windows Internet Name Service, Active Directory, and Pragmatic General Multicast. The WINS issue could allow for user privilege elevation, while the Active Directory and PGM vulnerabilities could allow a denial-of-service attack.
The "important" flaw affects a Windows registry Kill Bit, which is used to disable ActiveX controls. Microsoft says the vulnerability could lead to remote code execution, but it apparently believes mitigating factors make this vulnerability less dangerous.
Microsoft will release more specific information about the vulnerabilities next week.
The Internet Explorer fix may be related to a zero-day vulnerability published last month by security researcher Aviv Raff.
The flaw Raff discovered has to do with a Cross-Zone Scripting vulnerability in the "Print Table of Links" feature in Internet Explorer. It allows an attacker to construct a malicious Web page that, when printed, opens a hole so the attacker can execute arbitrary code. Raff said Microsoft has been told of the flaw and plans to fix it.
In May, Microsoft issued four security bulletins about six vulnerabilities.
Stay connected and informed by visiting our Enterprise IT Community!

Become a member today for instant access to free InformationWeek research, expert advice, peer perspectives, and more on the following topics:
- Application Performance Management (APM)
- Security Management
- Mainframe 2.0
- IT Automation
- Service Assurance
Also, visit our Government, Retail and Financial Services groups to see how these technologies apply specifically to those industries.
NOTE: Offer valid for U.S., U.S. possessions, & Canada only.