Tech2know

As part of  monthly routine security update cycle,  Microsoft released 5 new security updates on September 8, 2009. Below are the same :

1) MS09-045 – addresses a vulnerability in Jscript (KB 971961)

This security update is rated Critical for JScript 5.1 on Microsoft Windows 2000 Service Pack 4 and Critical for JScript 5.6, JScript 5.7 and JScript 5.8 on all supported releases of the Windows operating system except Windows 7 and Windows Server 2008 R2. This security update addresses the vulnerability by modifying the way that the JScript engine processes scripts in Web page.

2) MS09-046 – addresses a vulnerability in Microsoft Windows (KB 956844)

This security update resolves a privately reported vulnerability in the DHTML Editing Component ActiveX control. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for all supported editions of Microsoft Windows 2000 and Windows XP and Moderate for all supported editions of Windows Server 2003.

3) MS09-047 – addresses a vulnerability in Microsoft Windows (KB 973812)

This security update resolves two privately reported vulnerabilities in Windows Media Format. Either vulnerability could allow remote code execution if a user opened a specially crafted media file. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for Windows Media Format Runtime 9.0, Windows Media Format Runtime 9.5, Windows Media Format Runtime 11, Microsoft Media Foundation, Windows Media Services 9.1, and Windows Media Services 2008.

4) MS09-048 – addresses a vulnerability in Microsoft Windows (KB 967723)

This security update resolves several privately reported vulnerabilities in Transmission Control Protocol/Internet Protocol (TCP/IP) processing. The vulnerabilities could allow remote code execution if an attacker sent specially crafted TCP/IP packets over the network to a computer with a listening service. Firewall best practices and standard default firewall configurations can help protect networks from attacks that originate outside the enterprise perimeter. Best practices recommend that systems that are connected to the Internet have a minimal number of ports exposed.

This security update is rated Critical for all supported editions of Windows Vista and Windows Server 2008, and Important for all supported editions of Microsoft Windows 2000 Service Pack 4 and Windows Server 2003.

5) MS09-049 – addresses a vulnerability in Microsoft Windows (KB 970710)

This security update resolves a privately reported vulnerability in Wireless LAN AutoConfig Service. The vulnerability could allow remote code execution if a client or server with a wireless network interface enabled receives specially crafted wireless frames. Systems without a wireless card enabled are not at risk from this vulnerability.
This security update is rated Critical for supported editions of Windows Vista and Important for supported editions of Windows Server 2008.

You can get detailed information about these updates on 5 New security updates from Microsoft.

So, don’t forget to apply the updates.

The easiest way to stay informed about everything on Tech2know is to go for at lease one of below options :

Subscribe to my RSS feed / Subscribe by E Mail / Follow me on twitter /Become a fan on Facebook.

Stay tuned for more.

Related posts:

1. Microsoft to release 9 security updates of which five are Critical
2. Mozilla released security updates for Firefox 3.5.2 and 3.0.13
3. Microsoft Enters Fight Against Malware with Security Essentials
4. Mozilla releases three critical updats for Firefox
5. Apple Released Bluetooth and Hard Drive Firmware Updates