# MA-264.012011: MyCERT Alert - Microsoft Security Bulletin Summary For January 2011

**Date:** 13 Jan 2011  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-264.012011  
**Advisory ID:** MA-264.012011

---

**1.0 Introduction**
Microsoft has released 2 security bulletins for January 2011 where the first bulletin is rated Critical, while the second is rated Important.
**2.0 The following is the vulnerability rated as Critical:**
> **2.1 Vulnerabilities in Microsoft Data Access Components Could Allow Remote Code Execution (2451910)**
>
> This security update resolves two privately reported vulnerabilities in Microsoft Data Access Components. The vulnerabilities could allow remote code execution if a user views a specially crafted Web page. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
>
> Patch: <http://go.microsoft.com/fwlink/?LinkId=204803>
**3.0 The following is the vulnerability rated as Important:**
> **3.1 Vulnerability in Windows Backup Manager Could Allow Remote Code Execution (2478935)**
>
> This security update resolves a publicly disclosed vulnerability in Windows Backup Manager. The vulnerability could allow remote code execution if a user opens a legitimate Windows Backup Manager file that is located in the same network directory as a specially crafted library file. For an attack to be successful, a user must visit an untrusted remote file system location or WebDAV share and open the legitimate file from that location, which in turn could cause Windows Backup Manager to load the specially crafted library file.
>
> Patch: <http://go.microsoft.com/fwlink/?LinkId=207795>
**4.0 Recommendations**
Users are recommended to perform the update immediately. All of the patches could be done almost automatically via the Windows Update application. Security updates are also available at:
- <http://go.microsoft.com/fwlink/?LinkId=21129>
The how-to perform of the Windows Update is available at the following URL:
- [https://www.mycert.org.my/portal/articles-content?menu=b9f3fdda-c343-4cb4-99a7-a7506cfb13ba&id=62275f48-f209-4440-af1a-c5425c875fa4](https://www.mycert.org.my/portal/articles-content?menu=b9f3fdda-c343-4cb4-99a7-a7506cfb13ba&id=62275f48-f209-4440-af1a-c5425c875fa4
)
Generally, MyCERT advises the users of the software to be updated with the latest security announcements by the vendor. For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#6a0713090f181e2a0713090f181e4405180d440713)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
- <http://blogs.technet.com/b/msrc/archive/2011/01/11/january-2011-security-bulletins.aspx>
- <https://www.microsoft.com/technet/security/bulletin/ms11-jan.mspx>