<p>Microsoft has addressed a serious graphics zero-day vulnerability and a bevy of critical vulnerabilities in Internet Explorer in its latest round of security patches</p><p>The updates included both server and client side products. The software giant issued 12 bulletins, five critical, addressing 57 vulnerabilities in Microsoft Windows, Office, IE, Exchange and the .NET Framework.</p><p>The company repaired a remote code execution zero-day vulnerability in the Windows implementation of Vector Markup Language, an XML-based file format used by IE to display two-dimensional graphics. The flaw was detected following an attack used to gather information, vulnerability management experts said. According to the MS13-010 bulletin, an attacker would need to trick a victim into viewing a malicious Web page and pass a malicious file into IE's rendering engine. The update impacts all currently supported versions of IE.</p><p>Microsoft fixed 13 coding errors in IE. The MS13-009 bulletin addresses remote code execution vulnerabilities that can be exploited by an attacker in drive-by attacks. The update affects all currently supported versions of the Microsoft browser. All the issues were privately disclosed, Microsoft said.</p><p><a href="http://www.crn.in/news/software/2013/02/14/microsoft-fixes-critical-exchange-server-ie-flaws">Keep reading...</a></p>