Archived Content

In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
Alert

Microsoft Updates for Multiple Vulnerabilities

Last Revised
Alert Code
TA09-286A

Systems Affected

  • Microsoft Windows and Windows Server
  • Microsoft Internet Explorer
  • Microsoft Office
  • Microsoft .NET Framework
  • Microsoft Silverlight
  • Microsoft SQL Server
  • Microsoft Developer Tools
  • Microsoft Forefront

Overview

Microsoft has released updates to address vulnerabilities in Microsoft Windows and Windows Server, Internet Explorer, Office, .NET Framework, Silverlight, SQL Server, Developer Tools, and Forefront.

Microsoft has released multiple security bulletins for critical vulnerabilities in Microsoft Windows and Windows Server, Internet Explorer, Office, .NET Framework, Silverlight, SQL Server, Developer Tools, and Forefront. These bulletins are described in the Microsoft Security Bulletin Summary for October 2009.

Impact

A remote, unauthenticated attacker could execute arbitrary code, gain elevated privileges, or cause a vulnerable application to crash.

Solution

Apply updates from MicrosoftMicrosoft has provided updates for these vulnerabilities in the Microsoft Security Bulletin Summary for October 2009. The security bulletin describes any known issues related to the updates. Administrators are encouraged to note these issues and test for any potentially adverse effects. Administrators should consider using an automated update distribution system such as Windows Server Update Services (WSUS).

References

Microsoft Security Bulletin Summary for October 2009
Microsoft Windows Server Update Services

Revisions

October 13, 2009: Initial release

Related Advisories