Microsoft Security Bulletin Re-Releases/Advisories

[NICK ADSL UK]

Microsoft Security Bulletin Minor Revisions - Apr 10, 2013
Summary

The following bulletins have undergone minor revision increments.
Please see the bulletin for more details.

* MS13-029
* MS13-apr

Bulletin Information:

* MS13-029 - Critical
http://technet.microsoft.com/security/bulletin/ms13-029

- Reason for Revision: V1.1 (April 10, 2013): Corrected the
version number for Remote Desktop Connection Client on
Windows 7 Service Pack 1 and Windows Server 2008 R2 Service
Pack 1 from 7.0 to 7.1. This is an informational change only.
There were no changes to security update files.
- Originally posted: April 9, 2013
- Updated: April 10, 2013
- Bulletin Severity Rating: Critical
- Version: 1.1

* MS13-apr
http://technet.microsoft.com/security/bulletin/ms13-apr
- Reason for Revision: V1.1 (April 10, 2013): For MS13-029,
corrected the version number for Remote Desktop Connection
Client on Windows 7 Service Pack 1 and Windows Server 2008
R2 Service Pack 1 from 7.0 to 7.1. This is an informational
change only. There were no changes to security update files.
- Originally posted: April 9, 2013
- Updated: April 10, 2013
- Version: 1.1

[NICK ADSL UK]

Microsoft Security Advisory (2847140)

Vulnerability in Internet Explorer Could Allow Remote Code Execution

Published: Friday, May 03, 2013

Version: 1.0


General Information

Executive Summary

Microsoft is investigating public reports of a vulnerability in Internet Explorer 8. Microsoft is aware of attacks that attempt to exploit this vulnerability.

Internet Explorer 6, Internet Explorer 7, Internet Explorer 9, and Internet Explorer 10 are not affected by the vulnerability.

This is a remote code execution vulnerability. The vulnerability exists in the way that Internet Explorer accesses an object in memory that has been deleted or has not been properly allocated. The vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer. An attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer and then convince a user to view the website.

On completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through our monthly security update release process, or an out-of-cycle security update, depending on customer needs.

We are actively working with partners in our Microsoft Active Protections Program (MAPP) to provide information that they can use to provide broader protections to customers. In addition, we are actively working with partners to monitor the threat landscape and take action against malicious sites that attempt to exploit this vulnerability.

Microsoft continues to encourage customers to follow the guidance in the Microsoft Safety & Security Center of enabling a firewall, applying all software updates, and installing antimalware software.
https://technet.microsoft.com/en-us/...visory/2847140

[NICK ADSL UK]

Microsoft security bulletin for may 14 2013
Note: There may be latency issues due to replication, if the page does not display keep refreshing

Today Microsoft released the following Security Bulletin(s).

Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.

Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.

Bulletin Summary:
http://technet.microsoft.com/en-us/s...letin/ms13-may


Critical (2)
Microsoft Security Bulletin MS13-037
Cumulative Security Update for Internet Explorer (2829530)
https://technet.microsoft.com/securi...letin/ms13-037

Microsoft Security Bulletin MS13-038
Security Update for Internet Explorer (2847204)
https://technet.microsoft.com/securi...letin/ms13-038


Important (8)
Microsoft Security Bulletin MS13-039
Vulnerability in HTTP.sys Could Allow Denial of Service (2829254)
https://technet.microsoft.com/securi...letin/MS13-039

Microsoft Security Bulletin MS13-040
Vulnerabilities in .NET Framework Could Allow Spoofing (2836440)
http://technet.microsoft.com/security/bulletin/MS13-040

Microsoft Security Bulletin MS13-041
Vulnerability in Lync Could Allow Remote Code Execution (2834695)
https://technet.microsoft.com/securi...letin/ms13-041

Microsoft Security Bulletin MS13-042
Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2830397)
https://technet.microsoft.com/securi...letin/ms13-042

Microsoft Security Bulletin MS13-043
Vulnerability in Microsoft Word Could Allow Remote Code Execution (2830399)
https://technet.microsoft.com/securi...letin/ms13-043

Microsoft Security Bulletin MS13-044
Vulnerability in Microsoft Visio Could Allow Information Disclosure (2834692)
https://technet.microsoft.com/securi...letin/ms13-044

Microsoft Security Bulletin MS13-045
Vulnerability in Windows Essentials Could Allow Information Disclosure (2813707)
https://technet.microsoft.com/securi...letin/ms13-045

Microsoft Security Bulletin MS13-046
Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation Of Privilege (2840221)
https://technet.microsoft.com/securi...letin/ms13-046


Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.

If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact For home users, no-charge support for security updates (only!) is available by calling 800-MICROSOFT (800-642-7676) in the US or 877-568-2495 in Canada.

As always, download the updates only from the vendors website - visit Windows Update and Office Update or Microsoft Update websites. You may also get the updates thru Automatic Updates functionality in Windows system.

Security Tool
Find out if you are missing important Microsoft product updates by using MBSA.