Though the lone security bulletin itself is rated critical, only two of the three vulnerabilities have a critical vulnerability rating on their own. Both of those issues, if successfully exploited, could allow a hacker to remotely execute code.

The two most serious flaws are labeled by Microsoft as SMB buffer overflow and validation vulnerabilities and are due to the way the SMB protocol software handles specially crafted SMB packets. In both cases, the software insufficiently validates the buffer size before writing to it.

According to Microsoft, an attempt to exploit either vulnerability would not require authentication, however, neither of the flaws has been subjected to attacks thus far.

Read the rest of this article on eWEEK.com.