October 2008 Security Bulletin Release

Microsoft has released eleven (11) security bulletins: Four (4) rated Critical, six (6) rated Important, and one (1) rated Moderate. In addition, there is one new security advisory (956391) and a bulletin major revision (MS08-041) released on October 14.

Critical:

• MS08-057 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (956416)

• MS08-058 Cumulative Security Update for Internet Explorer (956390)

• MS08-059 Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution (956695)

• MS08-060 Vulnerability in Active Directory Could Allow Remote Code Execution (957280)

Important:

• MS08-061 Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (954211)

• MS08-062 Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution (953155)

• MS08-063 Vulnerability in SMB Could Allow Remote Code Execution (957095)

• MS08-064 Vulnerability in Virtual Address Descriptor Manipulation Could Allow Elevation of Privilege (956841)

• MS08-065 Vulnerability in Message Queuing Could Allow Remote Code Execution (951071)

• MS08-066 Vulnerability in the Microsoft Ancillary Function Driver Could Allow Elevation of Privilege (956803)

Moderate:

• MS08-056 Vulnerability in Microsoft Office Could Allow Information Disclosure (957699)

Advisory

• Advisory 956391 Cumulative Security Update of ActiveX Kill Bits

Revised:

• Microsoft Security Bulletin MS08-041

References:

• MSRC Blog: October 2008 Monthly Bulletin Release
• Technet: Microsoft Security Bulletin Summary for October 2008

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...