Microsoft Security Bulletin: December 2009

Microsoft released six security bulletins addressing a total of 12 vulnerabilities. The updates affect Windows, Internet Explorer and Microsoft Office.

Affected products include Windows, Internet Explorer (IE) and Microsoft Office products. Additional information regarding the severity and exploitability are available in the MSRC blog, linked below.


Critical

• Microsoft Security Bulletin MS09-071
  Vulnerabilities in Internet Authentication Service Could Allow Remote Code Execution (974318), http://www.microsoft.com/technet/security/bulletin/ms09-071.mspx
  
  
• Microsoft Security Bulletin MS09-074
  Vulnerability in Microsoft Office Project Could Allow Remote Code Execution (KB 967183), http://www.microsoft.com/technet/security/bulletin/ms09-074.mspx
  
  
• Microsoft Security Bulletin MS09-072
  Cumulative Security Update for Internet Explorer (976325), http://www.microsoft.com/technet/security/bulletin/ms09-072.mspx

Important

• Microsoft Security Bulletin MS09-069
  Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (974392), http://www.microsoft.com/technet/security/bulletin/ms09-069.mspx
  
  
• Microsoft Security Bulletin MS09-070
  Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution (971726), http://www.microsoft.com/technet/security/bulletin/ms09-070.mspx
  
  
• Microsoft Security Bulletin MS09-073
  Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution (975539), http://www.microsoft.com/technet/security/bulletin/ms09-073.mspx

References:

• MSRC: December 2009 Security Bulletin Release
• TechNet: Microsoft Security bulletin summary for December 2009
  
  

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Clubhouse Tags: Clubhouse, Microsoft, Windows, Security, Updates, Vulnerabilities, Information

December 2009 Bulletin Release Advance Notification

On Tuesday, December 8, 2009, Microsoft is planning to release six new security bulletins addressing 12 vulnerabilities in Windows, Internet Explorer (IE) and Microsoft Office products. Three of the bulletins have a maximum severity rating of Critical and three have a maximum severity rating of Important.

As indicated by Jerry Bryant in the MSRC Blog, the updates touch all supported versions of Windows and IE. Expect that a restart will be required. In addition, Jerry reported:

"We want to make customers aware that we will be addressing the vulnerability discussed in Security Advisory 977981 in the IE bulletin on Tuesday. We know that customers are concerned about this issue and we are also aware that Proof of Concept (PoC) code is available publicly."

References:

• MSRC: December 2009 bulletin Release
• TechNet: Microsoft Security Bulletin Advance Notification for December 2009

Clubhouse Tags: Clubhouse, Security, Updates, Microsoft, Information

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Security Advisory for Adobe Flash Player

Adobe released Security Advisory APSB09-19 affecting Adobe Flash Player 10.0.32.18 and earlier versions and Adobe AIR 1.5.2 and earlier versions. Adobe has announced a security update to resolve critical security issues for these products on Tuesday, December 8, 2009.

As defined by Adobe, a critical security issue is a vulnerability, which, if exploited would allow malicious native-code to execute, potentially without a user being aware.

References:

• Pre-Notification - Security Update for Adobe Flash Player - Adobe Product Security Incident Response Team (PSIRT)
• Adobe - Security Bulletin APSB09-19 Security Advisory for Adobe Flash Player

Clubhouse Tags: Clubhouse, Security, Updates, Vulnerabilities, Adobe

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...