Each bulletin has one or more patches to fix critical security
issues, some of which are already being exploited. Three
bulletins discuss attacks that can be used to take over
computers without any user interaction. The remaining bulletins
warn about client-side vulnerabilities, which can be attacked
when a user visits an evil website or opens a malformed
document. Remote attacks (or server-side attacks) can be
performed against desktops, laptops or servers running services
such as the file and printing services or Web services. An
attacker can send malicious packets to the TCP ports running
these services. Once the packets are received, they are usually
coded to take actions such as adding user accounts, installing
backdoors or shutting down the system entirely. Since file,
printing and Web services are intended to be available to remote
users, the TCP ports are also open to exploits. Attackers can
launch exploit code at any time, and unlike the client-side
attacks discussed below, users don't need to be on