Microsoft security updates for August 2006
Published: August 8, 2006

As part of Microsoft's routine, monthly security update cycle we released the following 12 security updates on August 8, 2006:

• MS06-040 - addresses a vulnerability in Microsoft Windows

• MS06-041 - addresses a vulnerability in Microsoft Windows

• MS06-042 - addresses a vulnerability in Internet Explorer, a component of Windows

• MS06-043 - addresses a vulnerability in Microsoft Windows

• MS06-044 - addresses a vulnerability in Microsoft Windows

• MS06-045 - addresses a vulnerability in Microsoft Windows

• MS06-046 - addresses a vulnerability in Microsoft Windows

• MS06-047 - addresses a vulnerability in Microsoft Office

• MS06-048 - addresses a vulnerability in Microsoft PowerPoint

• MS06-049 - addresses a vulnerability in Microsoft Windows

• MS06-050 - addresses a vulnerability in Microsoft Windows

• MS06-051 - addresses a vulnerability in Microsoft Windows

Full Details @ MS

Microsoft Security Bulletin Summary for September, 2006
Published: September 12, 2006

Summary
Included in this advisory are updates for newly discovered vulnerabilities. These vulnerabilities, broken down by severity are:

Critical (1)
Bulletin Identifier Microsoft Security Bulletin MS06-054
Bulletin Title
Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)

Important (1)
Bulletin Identifier Microsoft Security Bulletin MS06-052
Bulletin Title
Vulnerability in Reliable Multicast Program (PGM) Could Allow Remote Code Execution (919007)

Moderate (1)
Bulletin Identifier Microsoft Security Bulletin MS06-053
Bulletin Title
Vulnerability in Indexing Service Could Allow Cross-Site Scripting (920685)

More @ MS

Microsoft Security Bulletin Summary for October, 2006
Published: October 10, 2006

Summary
Included in this advisory are updates for newly discovered vulnerabilities. These vulnerabilities, broken down by severity are:

Critical (6)

Microsoft Security Bulletin MS06-057
Bulletin Title
Vulnerability in Windows Shell Could Allow Remote Code Execution (923191)

Executive Summary
This update resolves a vulnerability in Windows that could allow remote code execution.

Microsoft Security Bulletin MS06-058
Bulletin Title
Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (924163)

Executive Summary
This update resolves vulnerabilities in PowerPoint that could allow remote code execution.

Microsoft Security Bulletin MS06-059
Bulletin Title
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

Executive Summary
This update resolves vulnerabilities in Excel that could allow remote code execution.

Microsoft Security Bulletin MS06-060
Bulletin Title
Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (924554)

Executive Summary
This update resolves several vulnerabilities in Microsoft Word, the most critical of which could allow remote code execution.

Microsoft Security Bulletin MS06-061
Bulletin Title
Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (924191)

Executive Summary
This update resolves vulnerabilities in Windows that could allow remote code execution.

Microsoft Security Bulletin MS06-062
Bulletin Title
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922581)

Executive Summary
This update resolves vulnerabilities in Office that could allow remote code execution.

Microsoft Technet

According to the MSRC Blog:

Due to some network issues experienced on the Microsoft Update platform, the October security updates released today are not yet currently available via:

Microsoft Update
Automatic Updates
Windows Server Update Services (WSUS)
Windows Update v6

If you want to get more information, please visit the MSRC-Blog at http://blogs.technet.com/msrc/archive/2 ... lease.aspx

Microsoft Security Bulletin MS06-072
Cumulative Security Update for Internet Explorer (925454)
Published: December 12, 2006

Version: 1.0

As part of Microsoft's routine, monthly security update cycle, we released the following security updates on December 12, 2006:

• MS06-072 - addresses a vulnerability in Microsoft Internet Explorer (KB925454)
• MS06-073 - addresses a vulnerability in Microsoft Visual Studio (KB925674)
• MS06-074 - addresses a vulnerability in Microsoft Windows (KB926247)
• MS06-075 - addresses a vulnerability in Microsoft Windows (KB926255)
• MS06-076 - addresses a vulnerability in Microsoft Windows (KB923694)
• MS06-077 - addresses a vulnerability in Microsoft Windows (KB926121)
• MS06-078 - addresses a vulnerability in Microsoft Windows Media Player (KB923689 and KB925398)
• MS06-059 (re-release) - addresses a vulnerability in Microsoft Office (KB924164)

MS TechNet

Microsoft Security Bulletin Summary for January, 2007
Published: January 9, 2007

Critical (3)

Bulletin Identifier Microsoft Security Bulletin MS07-002
Bulletin Title
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (927198)

Executive Summary
This update resolves vulnerabilities in Excel that could allow remote code execution.

Maximum Severity Rating
Critical

Impact of Vulnerability
Remote Code Execution

Affected Software
Office. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier Microsoft Security Bulletin MS07-003
Bulletin Title
Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution (925938)

Executive Summary
This update resolves vulnerabilities in Outlook that could allow remote code execution.

Maximum Severity Rating
Critical

Impact of Vulnerability
Remote Code Execution

Affected Software
Office. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier Microsoft Security Bulletin MS07-004
Bulletin Title
Vulnerability in Vector Markup Language Could Allow Remote Code Execution (929969)

Executive Summary
This update resolves vulnerabilities in Internet Explorer that could allow remote code execution.

Maximum Severity Rating
Critical

Impact of Vulnerability
Remote Code Execution

Affected Software
Windows, Internet Explorer. For more information, see the Affected Software and Download Locations section.

Important (1)

Bulletin Identifier Microsoft Security Bulletin MS07-001
Bulletin Title
Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution (921585)

Executive Summary
This update resolves a vulnerability in Office that could allow remote code execution. User interaction is required for an attacker to exploit these vulnerabilities.

Maximum Severity Rating
Important

Impact of Vulnerability
Remote Code Execution

Affected Software
Office. For more information, see the Affected Software and Download Locations section.

MS

Microsoft Security Bulletin Summary for February, 2007
Published: February 12, 2007

• Microsoft Security Bulletin MS07-008
  Bulletin Title:
  Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843) Critical
• Microsoft Security Bulletin MS07-009
  Bulletin Title:
  Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution(927779) Critical
• Microsoft Security Bulletin MS07-010
  Bulletin Title:
  Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution (932135)Critical
• Microsoft Security Bulletin MS07-014
  Bulletin Title:
  Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (929434) Critical
• Microsoft Security Bulletin MS07-015
  Bulletin Title:
  Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554)Critical
• Microsoft Security Bulletin MS07-016
  Bulletin Title:
  Cumulative Security Update for Internet Explorer (928090)Critical
• Microsoft Security Bulletin MS07-005
  Bulletin Title:
  Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (923723) Important
• Microsoft Security Bulletin MS07-006
  Bulletin Title:
  Vulnerability in Windows Shell Could Allow Elevation of Privilege (928255)Important
• Microsoft Security Bulletin MS07-007
  Bulletin Title:
  Vulnerability in Windows Image Acquisition Service Could Allow Elevation of Privilege (927802) Important
• Microsoft Security Bulletin MS07-011
  Bulletin Title:
  Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436)Important
• Microsoft Security Bulletin MS07-012
  Bulletin Title:
  Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667)Important
• Microsoft Security Bulletin MS07-013
  Bulletin Title:
  Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution (918118)Important

MS Security Bulletin

Microsoft Security Bulletin MS07-017Vulnerabilities in GDI Could Allow Remote Code Execution (925902)
Published: April 3, 2007

Version: 1.0


Microsoft

April 2007 Monthly Bulletin Release
Updated: April 10, 2007

• Microsoft Content Management Server (MS07-018)
  Maximum severity rating of Critical
  Could Allow Remote Code Execution
• Universal Plug and Play (MS07-019)
  Maximum severity rating of Critical
  Could Allow Remote Code Execution
• Microsoft Agent (MS07-020)
  Maximum severity rating of Critical
  Could Allow Remote Code Execution
• CSRSS (MS07-021)
  (Maximum severity rating of Critical
  Could Allow Remote Code Execution
• Windows Kernel (MS07-022)
  Maximum severity rating of Important
  Could Allow Remote Elevation of Privilege

MS

Microsoft Security Bulletin Summary for May 2007
Published: May 8, 2007

This bulletin summary lists security bulletins released for May 2007.

Summary
This bulletin summary includes security updates for newly discovered vulnerabilities. Their security bulletins, in order of severity, are as follows:

• Microsoft Security Bulletin MS07-023
  Bulletin Title
  Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (934233)
  Quote:
  This update resolves vulnerabilities in Microsoft Excel that could allow remote code execution.
  Maximum Severity Rating Critical
• Microsoft Security Bulletin MS07-024
  Bulletin Title
  Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232)
  Quote:
  This update resolves vulnerabilities in Microsoft Word that could allow remote code execution.
  Maximum Severity Rating Critical
• Microsoft Security Bulletin MS07-025
  Bulletin Title
  Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873)
  Quote:
  This update resolves a vulnerability in Microsoft Office that could allow remote code execution.
  Maximum Severity Rating Critical
• Microsoft Security Bulletin MS07-026
  Bulletin Title
  Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (931832)
  Quote:
  This update resolves vulnerabilities in Microsoft Exchange that could allow remote code execution.
  Maximum Severity Rating Critical
• Microsoft Security Bulletin MS07-027
  Bulletin Title
  Cumulative Security Update for Internet Explorer (931768)
  
  Quote:
  This update resolves vulnerabilities in Internet Explorer that could allow remote code execution.
  Maximum Severity Rating Critical
• Microsoft Security Bulletin MS07-028
  Bulletin Title
  Vulnerability in CAPICOM Could Allow Remote Code Execution (931906)
  Quote:
  This update resolves a vulnerability in the Cryptographic API Component Object Model (CAPICOM) that could allow remote code execution.
  Maximum Severity Rating Critical
• Microsoft Security Bulletin MS07-029
  Bulletin Title
  Vulnerability in RPC on Windows DNS Server Could Allow Remote Code Execution (935966)
  Quote:
  This update resolves a vulnerability in RPC on Windows DNS Server that could allow remote code execution.
  Maximum Severity Rating Critical

Microsoft Security Bulletin

Microsoft Security Bulletin Summary for June 2007
Published: June 12, 2007

Executive Summaries
The security bulletins for this month are as follows, in order of severity:

Bulletin Identifier Microsoft Security Bulletin MS07-031 [Critical]
Bulletin Title
Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution (935840)

Executive Summary Microsoft Security Bulletin MS07-033[Critical]
Bulletin Title
Cumulative Security Update for Internet Explorer (933566)

Executive Summary Microsoft Security Bulletin MS07-034 [Critical]Bulletin Title
Cumulative Security Update for Outlook Express and Windows Mail (929123)

Executive Summary Microsoft Security Bulletin MS07-035[Critical]
Bulletin Title
Vulnerability in Win32 API Could Allow Remote Code Execution (935839)

Executive Summary
Important (1)
Moderate (1)

Full Details @ MS

Microsoft security updates for July 2007
Published: July 10, 2007

MS07-036 - Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (936542)
MS07-037 - Vulnerability in Microsoft Office Publisher 2007 Could Allow Remote Code Execution (936548)
MS07-038 - Vulnerability in Windows Vista Firewall Could Allow Information Disclosure (935807)
MS07-039 - Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122)
MS07-040 - Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212)
MS07-041 - Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution (939373)

MS Update Page

Microsoft Security Bulletin Summary for August 2007
Published: August 14, 2007

Critical:
Microsoft Security Bulletin MS07-042
Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (936227)
http://go.microsoft.com/fwlink/?LinkId=88350

Microsoft Security Bulletin MS07-043
Vulnerability in OLE Automation Could Allow Remote Code Execution (921503)
http://go.microsoft.com/fwlink/?LinkId=70249

Microsoft Security Bulletin MS07-044
Vulnerability in Microsoft Excel Could Allow Remote Code Execution (940965)
http://go.microsoft.com/fwlink/?LinkId=96778

Microsoft Security Bulletin MS07-045
Cumulative Security Update for Internet Explorer (937143)
http://go.microsoft.com/fwlink/?LinkId=91712

Microsoft Security Bulletin MS07-046
Vulnerability in GDI Could Allow Remote Code Execution (938829)
http://go.microsoft.com/fwlink/?LinkId=94466

Microsoft Security Bulletin MS07-050
Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127)
http://go.microsoft.com/fwlink/?LinkId=94737

Important (3)
Microsoft Security Bulletin MS07-047
Vulnerability in Windows Media Player Could Allow Remote Code Execution (936782)
http://go.microsoft.com/fwlink/?LinkId=88628

Microsoft Security Bulletin MS07-048
Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)
http://go.microsoft.com/fwlink/?LinkId=94465

Microsoft Security Bulletin MS07-049
Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)
http://go.microsoft.com/fwlink/?LinkId=92734

MS

Microsoft Security Bulletin Summary for September 2007
Published: September 11, 2007

Microsoft Security Bulletin MS07-051 Critical
Vulnerability in Microsoft Agent Could Allow Remote Code Execution (938827) Microsoft Security Bulletin MS07-052 Important
Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution (941522) Microsoft Security Bulletin MS07-053 Important
Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778) Microsoft Security Bulletin MS07-054 Important
Vulnerability in MSN Messenger and Windows Live Messenger could allow Remote Code Execution (942099) MS Sept. Bulletin

Monthly Microsoft Security Bulletins

• MS07-055 addresses a vulnerability in Kodak Image Viewer, and is rated as a Critical bulletin.
• MS07-056 addresses a vulnerability Outlook Express and Windows Mail, and is rated as a Critical bulletin for earlier versions of Windows and as an Important bulletin for Windows Vista.
• MS07-057 is a Cumulative Security Update for Internet Explorer, and is rated as a Critical bulletin.
• MS07-058 addresses a vulnerability in RPC, and is rated as an Important bulletin.
• MS07-059 addresses a vulnerability in Windows SharePoint Services 3.0 and Office SharePoint Server 2007, and is rated as an Important bulletin.
• MS07-060 addresses a vulnerability in Microsoft Word, and is rated as a Critical bulletin for earlier versions and as an Important bulletin for more recent versions.

MS Technet

November 2007 Monthly Release
Hi, this is Simon, Release Manager in the MSRC. I’d like to introduce you to our November security release. Today we are releasing two new bulletins:

·MS07-061: This update addresses a vulnerability in Windows URI handling, which could allow remote code execution and has a maximum severity of Critical.
· MS07-062: This update addresses a vulnerability in DNS which could allow spoofing and has a maximum severity of Important

Additionally we are re-releasing one bulletin:

· MS07-049: This update addresses a vulnerability in Virtual PC and Virtual Server and could allow elevation of privilege. This is a change to the installer code only, to address some limited installation problems that we have seen. There’s no change to the update binaries, so if you have already successfully installed this update, you do not need to reinstall it. Please refer to the bulletin revision notes for more detail.

MSRC Blog

Microsoft Security Bulletin Summary for December 2007
Published: December 11, 2007

Critical:

• MS07-064 - Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
• MS07-068 - Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
• MS07-069 - Cumulative Security Update for Internet Explorer (942615)

Important:

• MS07-063 - Vulnerability in SMBv2 Could Allow Remote Code Execution (942624)
• MS07-065 - Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)
• MS07-066 - Vulnerability in Windows Kernel Could Allow Elevation of Privilege (943078)
• MS07-067 -Vulnerability in Macrovision Driver Could Allow Local Elevation of Privilege (944653)

Microsoft has released four non-security, high-priority updates and 2007 Microsoft Office Service Pack 1 on Microsoft Update (MU) and Windows Server Update Services (WSUS).

Microsoft has released four non-security, high-priority updates for Windows and Windows SharePoint Services 3.0 Service Pack 1 on Windows Update (WU) and WSUS.

MS Security Bulletin December

Microsoft Security Bulletin Summary for January 2008
Published: January 8, 2008

Critical

• MS08-001 - Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)

Important

• MS08-002 - Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485)

Microsoft Security Bulletin

Microsoft Security Bulletin Summary for February 2008
Published: February 12, 2008

1. MS08-003 - Important -Vulnerability in Active Directory Could Allow Denial of Service (946538)
2. MS08-004 - Important Vulnerability in Windows TCP/IP Could Allow Denial of Service (946456)
3. MS08-005 - Important - Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831)
4. MS08-006 - Important Vulnerability in Internet Information Services Could Allow Remote Code Execution (942830)
5. MS08-007 - Critical - Vulnerability in WebDAV Mini-Redirector Could Allow Remote Code Execution (946026)
6. MS08-008 - Critical - Vulnerability in OLE Automation Could Allow Remote Code Execution (947890)
7. MS08-009 - Critical - Vulnerability in Microsoft Word Could Allow Remote Code Execution (947077)
8. MS08-010 - Cumulative Security Update for Internet Explorer (944533)
9. MS08-011 - Important Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)
10. MS08-012 - Critical - Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution (947085)
11. MS08-013 - Critical - Vulnerability in Microsoft Office Could Allow Remote Code Execution (947108)

MS Security Bulletin

Microsoft Security Bulletin Summary for March 2008
Published: March 11, 2008

Critical (4)

• Microsoft Security Bulletin MS08-014 -
  Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029)
  Quote:
  This security update resolves several privately reported and publicly reported vulnerabilities in Microsoft Office Excel that could allow remote code execution if a user opens a specially crafted Excel file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
• Microsoft Security Bulletin MS08-015 -
  Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031)
  Quote:
  This security update resolves a privately reported vulnerability in Microsoft Office Outlook. The vulnerability could allow remote code execution if Outlook is passed a specially crafted mailto URI. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. This vulnerability is not exploitable by simply viewing an e-mail through the Outlook preview pane.
• Microsoft Security Bulletin MS08-016
  Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030)
  Quote:
  This security update resolves two privately reported vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a malformed Office file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
• Microsoft Security Bulletin MS08-017 -
  Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (933103)
  Quote:
  This critical update resolves two privately reported vulnerabilities in Microsoft Office Web Components. These vulnerabilities could allow remote code execution if a user viewed a specially crafted Web page. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

MS Security Buletin

Microsoft Security Bulletins for April 2008
Published: April 8, 2008

5 Critical

• MS08-018 - Vulnerability in Microsoft Project Could Allow Remote Code Execution (950183)
• MS08-021 - Vulnerabilities in GDI Could Allow Remote Code Execution (948590)
• MS08-022 - Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338)
• MS08-023 - Security Update of ActiveX Kill Bits (948881)
• MS08-024 - Cumulative Security Update for Internet Explorer (947864)

3 Important

• MS08-019 - Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (949032)
• MS08-020 - Vulnerability in DNS Client Could Allow Spoofing (945553)
• MS08-025 - Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

Full Details @ MS

Microsoft Security Bulletin Summary for May 2008
Published: May 13, 2008

Critical (3)

Microsoft Security Bulletin MS08-026
Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (951207)
http://go.microsoft.com/fwlink/?LinkId=117295

Microsoft Security Bulletin MS08-027
Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208)
http://go.microsoft.com/fwlink/?LinkId=117907

Microsoft Security Bulletin MS08-028
Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution (950749)
http://go.microsoft.com/fwlink/?LinkId=114750

Moderate (1)

Microsoft Security Bulletin MS08-029
Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service (952044)
http://go.microsoft.com/fwlink/?LinkId=117943

More @ MS

June 2008 Monthly Release

Published: June 10, 2008
Details @ MS

• MS08-037 Vulnerabilities in DNS Could Allow Spoofing (953230)
• MS08-038 Vulnerability in Windows Explorer Could Allow Remote Code Execution (950582)
• MS08-039 Vulnerabilities in Outlook Web Access for Exchange Server Could Allow Elevation of Privilege (953747)
• MS08-040 Vulnerabilities in Microsoft SQL Server Could Allow Elevation of Privilege (941203)

MS July Bulletin

August 2008 Monthly Bulletin Release
Bulletins:

·MS08-041 – Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617) – Critical
·MS08-042 – Vulnerability in Microsoft Word Could Allow Remote Code Execution (955048) – Important
·MS08-043 – Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (954066) – Critical
·MS08-044 – Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (924090) – Critical
·MS08-045 – Cumulative Security Update for Internet Explorer (953838) – Critical
·MS08-046 – Vulnerability in Microsoft Windows Image Color Management System Could Allow Remote Code Execution (952954) – Critical
·MS08-047 – Vulnerability in IPsec Policy Processing Could Allow Information Disclosure (953733) – Important
·MS08-048 – Security Update for Outlook Express and Windows Mail (951066) – Important
·MS08-049 – Vulnerabilities in Event System Could Allow Remote Code Execution (950974) – Important
·MS08-050 – Vulnerability in Windows Messenger Could Allow Information Disclosure (955702) – Important
·MS08-051 – Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (949785) – Critical

MS August Monthly Security Bulletin

Microsoft Security Bulletin Summary for September 2008
Published: September 9, 2008

Executive Summaries
Critical (4)
The security bulletins for this month are as follows, in order of severity:

• Bulletin Identifier - Microsoft Security Bulletin MS08-054
  Bulletin Title -Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)
  Affected Software - Microsoft Windows.
• Bulletin Identifier- Microsoft Security Bulletin MS08-052
  Bulletin Title- Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593)
  Impact of Vulnerability- Remote Code Execution
  Affected Software- Microsoft Windows, Internet Explorer, .NET Framework, Office, SQL Server, Visual Studio.
• Bulletin Identifier- Microsoft Security Bulletin MS08-053
  Bulletin Title- Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution (954156)
  Impact of Vulnerability- Remote Code Execution
  Affected Software- Microsoft Windows
• Bulletin Identifier- Microsoft Security Bulletin MS08-055
  Bulletin Title- Vulnerability in Microsoft Office Could Allow Remote Code Execution (955047)
  Impact of Vulnerability- Remote Code Execution
  Affected Software- Microsoft Office.

Further Details @ MS

Microsoft Security Bulletin Summary for October 2008
Published: October 14, 2008
Version: 1.0
4 Critical updates:

• Bulletin Identifier-AD Bulletin
  Impact of Vulnerability- Remote Code Execution
  Affected Software- Microsoft Windows.
• Bulletin Identifier-IE Bulletin
  Impact of Vulnerability- Remote Code Execution
  Affected Software-Microsoft Windows, Internet Explorer
• Bulletin Identifier-HIS Bulletin
  Impact of Vulnerability- Remote Code Execution
  Affected Software-Microsoft Host Integration Server
• Bulletin Identifier-Excel Bulletin
  Impact of Vulnerability- Remote Code Execution
  Affected Software-Microsoft Office

6 Important

• Bulletin Identifier-Windows 1 Bulletin
  Impact of Vulnerability-Elevation of Privilege
  Affected Software-Microsoft Windows
• Bulletin Identifier-Windows 2 Bulletin
  Impact of Vulnerability-Elevation of Privilege
  Affected Software-Microsoft Windows
• Bulletin Identifier-Windows 3 Bulletin
  Impact of Vulnerability-Remote Code Execution
  Affected Software-Microsoft Windows
• Bulletin Identifier-Windows 4 Bulletin
  Impact of Vulnerability-Remote Code Execution
  Affected Software-Microsoft Windows
• Bulletin Identifier-Windows 5 Bulletin
  Impact of Vulnerability-Elevation of Privilege
  Affected Software-Microsoft Windows
• Bulletin Identifier-Windows 6 Bulletin
  Impact of Vulnerability-Remote Code Execution
  Affected Software-Microsoft Windows

1 Moderate:

• Bulletin Identifier-Office Bulletin
  Maximum Severity Rating-Moderate
  Impact of Vulnerability-Information Disclosure
  Affected Software-Microsoft Office

Details @ MS

Microsoft Security Bulletin Summary for November 2008
Published: November 11, 2008

• Bulletin Identifier-Microsoft Security Bulletin MS08-069
  Bulletin Title-Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218)
• Bulletin Identifier-Microsoft Security Bulletin MS08-068
  Bulletin Title-Vulnerability in SMB Could Allow Remote Code Execution (957097)

Continued Details @ MS

Microsoft Security Bulletin Summary for December 2008
Published: December 9, 2008

MS08-070: Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) Could Allow Remote Code Execution (932349) which is rated “Critical”

· MS08-071: Vulnerabilities in GDI Could Allow Remote Code Execution (956802) which is rated “Critical”

· MS08-072: Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (957173) which is rated “Critical”

· MS08-073: Cumulative Security Update for Internet Explorer (958215) which is rated “Critical”

· MS08-074: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (959070) which is rated “Critical”

· MS08-075: Vulnerabilities in Windows Search Could Allow Remote Code Execution (959349) which is rated “Critical”

· MS08-076: Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807) which is rated “Important”

· MS08-077: Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege (957175) which is rated “Important”

Microsoft

Microsoft Security Bulletin Summary for February 2009Published: February 10, 2009

MS09-002 rated Critical that addresses two code execution vulnerabilities in Internet Explorer.

· MS09-003 rated Critical that addresses one code execution vulnerability and one denial of service vulnerability in Exchange Server.

· MS09-004 rated Important that addresses one code execution vulnerability in SQL Server.

· MS09-005 rated Important that addresses three code execution vulnerabilities in Visio.

Microsoft Security Bulletin