AumHa Forums

Microsoft Security Bulletin Summary for October 2009
http://www.microsoft.com/technet/security/bulletin/ms09-oct.mspx

Microsoft is hosting a webcast to address customer questions on these bulletins on October 14, 2009, at 11:00 AM Pacific Time (US & Canada). Register now for the October security bulletin webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.
Highly recommended reading this month:

Security Research & Defense: Assessing the risk of the October 2009 Critical security bulletins
http://blogs.technet.com/srd/archive/2009/10/12/assessing-the-risk-of-the-october-security-bulletins.aspx

Critical Security Bulletins (8)
============================================================

MS09-050 - Critical: Vulnerabilities in SMBv2 Could Allow Remote Code Execution (KB975517)
http://www.microsoft.com/technet/security/bulletin/ms09-050.mspx

MS09-051 - Critical: Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (KB975682):
http://www.microsoft.com/technet/security/bulletin/ms09-051.mspx

MS09-052 - Critical: Vulnerability in Windows Media Player Could Allow Remote Code Execution (KB974112):
http://www.microsoft.com/technet/security/bulletin/ms09-052.mspx

MS09-054 - Critical: Cumulative Security Update for Internet Explorer (KB974455):
http://www.microsoft.com/technet/security/bulletin/ms09-054.mspx

MS09-055 - Critical: Cumulative Security Update of ActiveX Kill Bits (KB973525):
http://www.microsoft.com/technet/security/bulletin/ms09-055.mspx

MS09-060 - Critical: Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution (KB973965):
http://www.microsoft.com/technet/security/bulletin/ms09-060.mspx

MS09-061 - Critical: Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (KB974378):
http://www.microsoft.com/technet/security/bulletin/ms09-061.mspx

MS09-062 - Critical: Vulnerabilities in GDI+ Could Allow Remote Code Execution (KB957488):
http://www.microsoft.com/technet/security/bulletin/ms09-062.mspx


Important Security Bulletins (5)
============================================================

MS09-053 - Important: Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution (KB975254):
http://www.microsoft.com/technet/security/bulletin/ms09-053.mspx

MS09-056 - Important: Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (KB974571):
http://www.microsoft.com/technet/security/bulletin/ms09-056.mspx

MS09-057 - Important: Vulnerability in Indexing Service Could Allow Remote Code Execution (KB969059):
http://www.microsoft.com/technet/security/bulletin/ms09-057.mspx

MS09-058 - Important: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (KB971486):
http://www.microsoft.com/technet/security/bulletin/ms09-058.mspx

MS09-059 - Important: Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (KB975467):
http://www.microsoft.com/technet/security/bulletin/ms09-059.mspx


Other Information
=================

Microsoft Windows Malicious Software Removal Tool:
==================================================
Microsoft has released an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

Non-Security, High-Priority Updates on MU, WU, and WSUS:
========================================================

For information about non-security releases on Windows Update and Microsoft Update, please see:

• Description of Software Update Services and Windows Server Update Services changes in content for 2009. Includes all Windows content.
  http://support.microsoft.com/kb/894199
  
  
• New, Revised, and Released Updates for Microsoft Products Other Than Microsoft Windows
  http://technet.microsoft.com/en-us/wsus/bb466214.aspx

Note that this information pertains only to non-security, high-priority updates on Microsoft Update, Windows Update, Windows Server Update Services, and Software Update Services released on the same day as the Security Bulletin Summary. Information will not be provided about non-security updates released on other days.

========================================================

Support

• Customers in the U.S. and Canada can receive technical support from Microsoft Product Support Services at 1-866-PCSAFETY. There is no charge for support calls that are associated with security updates.
  
  
• International customers can receive support from their local Microsoft subsidiaries. There is no charge for support that is associated with security updates. For more information about how to contact Microsoft for support issues, visit the International Support Web site.

© 2009 Microsoft Corporation. All rights reserved.