[BigFix-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Patches for Windows (English)'

[autonotify at us.ibm.com]

Fixlet Site - 'Patches for Windows (English)'
Current Version: 1710	Published: Tue, 22 Jan 2013 00:47:37  GMT

New Fixlets:
============

***************************************************************
Title: MS13-003: Vulnerabilities in System Center Operations Manager Could Allow Elevation of Privilege - System Center Operations Manager 2007 R2 Agent (Manual caching required)
Severity: Important
Fixlet ID: 1300305
Fixlet Link: http://technet.microsoft.com/en-us/security/bulletin/MS13-003

Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in Microsoft System Center Operations Manager. The vulnerabilities could allow elevation of privilege if a user visits an affected website by way of a specially crafted URL. An attacker would have no way to force users to visit such a website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or Instant Messenger message that takes users to the affected website. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities.

***************************************************************
Title: MS13-003: Vulnerabilities in System Center Operations Manager Could Allow Elevation of Privilege - System Center Operations Manager 2007 R2 Agent (Manual caching required) (x64)
Severity: Important
Fixlet ID: 1300307
Fixlet Link: http://technet.microsoft.com/en-us/security/bulletin/MS13-003

Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in Microsoft System Center Operations Manager. The vulnerabilities could allow elevation of privilege if a user visits an affected website by way of a specially crafted URL. An attacker would have no way to force users to visit such a website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or Instant Messenger message that takes users to the affected website. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities.