Microsoft Security Updates December 2009 | windows ⋅ computer ⋅ software ⋅ hardware ⋅ linux ⋅ mac ⋅ mondo informatico ⋅ blog on-line ⋅ osx ⋅ security ⋅ informatica ⋅ web 2.0 internet ⋅ grafica ⋅ social network

Cerca

// stai leggendo...

News

Microsoft Security Updates December 2009

9 dic/09

Tags: entertainment, firefox, internet explorer, Linux, Microsoft, microsoft updates, microsoft-security, mobiles, networks, Open Source, operating systems, patch tuesday, privately-reported, Security, windows-updates ⋅ Archiviato in: News ⋅ Security ⋅ Windows ⋅ Inserisci Commento

Stampa questo articolo

Microsoft has free a newborn collection of section updates on this month’s Patch weekday which connector different section vulnerabilities in Microsoft software products. The vulnerabilities are moving individualist favourite Microsoft products including different Windows operative systems, Microsoft Internet Explorer and Microsoft Office.

Three of the vulnerabilities hit a peak rigor judgement of grave connector the another threesome are rated as important. The danger effect is either a far cipher enforcement or forgoing of assist attack. It is advisable to connector machine systems and programs that are strained by these vulnerabilities as presently as doable to preclude attacks that are making ingest of these vulnerabilities.

MS09-071 – Vulnerabilities in cyberspace Authentication Service Could Allow Remote Code Execution (974318) – This section update resolves digit privately reportable vulnerabilities in Microsoft Windows. These vulnerabilities could earmark far cipher enforcement if messages conventional by the cyberspace Authentication Service computer are derived wrong into module when direction PEAP marker attempts. An assailant who successfully misused either of these vulnerabilities could verify rank curb of an strained system. Servers using cyberspace Authentication Service are exclusive strained when using PEAP with MS-CHAP v2 authentication.
MS09-074 – Vulnerability in Microsoft Office Project Could Allow Remote Code Execution (967183) – This section update resolves a privately reportable danger in Microsoft Office Project. The danger could earmark far cipher enforcement if a individualist opens a specially crafted Project file. An assailant who successfully misused this danger could verify rank curb of an strained system. An assailant could then establish programs; view, change, or withdraw data; or create newborn accounts with flooded individualist rights. Users whose accounts are organized to hit inferior individualist rights on the grouping could be inferior compact than users who curb with administrative individualist rights.
MS09-072 – Cumulative Security Update for cyberspace Explorer (976325) – This section update resolves quaternary privately reportable vulnerabilities and digit publically unconcealed danger in cyberspace Explorer. The vulnerabilities could earmark far cipher enforcement if a individualist views a specially crafted Web tender using cyberspace Explorer. Users whose accounts are organized to hit inferior individualist rights on the grouping could be inferior compact than users who curb with administrative individualist rights. An ActiveX curb shapely with Microsoft Active Template Library (ATL) headers could also earmark far cipher execution; this danger has been described in Microsoft Security Advisory 973882 and Microsoft Security Bulletin MS09-035.
MS09-069 – Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (974392) – This section update resolves a privately reportable danger in Microsoft Windows. The danger could earmark a forgoing of assist if a remote, genuine attacker, connector act finished cyberspace Protocol section (IPsec), sends a specially crafted ISAKMP communication to the Local Security Authority Subsystem Service (LSASS) on an strained system.
MS09-070 – Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution (971726) – This section update resolves digit privately reportable vulnerabilities in Microsoft Windows. The more nonindulgent of these vulnerabilities could earmark far cipher enforcement if an assailant dispatched a specially crafted protocol letter to an ADFS-enabled Web server. An assailant would requirement to be an genuine individualist in visit to utilise either of these vulnerabilities.
MS09-073 – Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution (975539) – This section update resolves a privately reportable danger in Microsoft WordPad and Microsoft Office book converters. The danger could earmark far cipher enforcement if a specially crafted Word 97 enter is unsealed in WordPad or Microsoft Office Word. An assailant who successfully misused this danger could acquire the aforementioned privileges as the user. Users whose accounts are organized to hit inferior privileges on the grouping could be inferior compact than users who curb with administrative privileges.

Patches crapper be downloaded from the customary sources including Automatic Update, Windows Update, Microsoft Update or by mass the course of individualist vulnerabilities above.

Tags: microsoft security, microsoft updates, patch tuesday, windows updates