The updates for Microsofts December 2013 Patch Tuesday are out. There are eleven bulletins, with six of them fixing remote code execution holes. Five of those are rated by Microsoft as critical, but only one gets the most severe rating from SophosLabs. Not fixed yet is the recently-announced zero-day in the Windows XP (and Server 2003) kernel driver NDPROXY.SYS, part of the telephony API. That hole doesnt allow crooks to break into your computer, but if they are already in (or find a way in) this bug allows an Elevation of Privilege, or EoP.”]