Microsoft Expected to Patch XP Zero-Day on Patch Tuesday

[Injun]

Microsoft announced Thursday that it plans to release four bulletins next week as part of the year’s first batch of Patch Tuesday security updates, none of which are rated critical.

Despite the relatively light load, the patches do address a zero-day vulnerability in Windows XP and Windows Server 2003 made public in early November. Hackers were actively exploiting the flaw in the ND Proxy driver that manages Microsoft’s Telephony API on XP via infected PDF attachments. Exploits work only in conjunction with an Adobe Reader vulnerability that has since been patched.

http://threatpost.com/microsoft-expected-to-patch-xp-zero-day-on-patch-tuesday/103543