 dpPremium,MVM
join:2000-12-08
Greensburg, PA
kudos:7 | Microsoft Security Bulletin(s) for June 9, 2009 Note: There may be latency issues due to replication, if the page does not display keep refreshing
Today Microsoft released the following Security Bulletin(s).
Note: »www.microsoft.com/technet/security and »www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.
Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.
Bulletin Summary:
»www.microsoft.com/technet/securi···jun.mspx
Critical (6)
Microsoft Security Bulletin MS09-018
Vulnerabilities in Active Directory Could Allow Remote Code Execution (971055)
»www.microsoft.com/technet/securi···018.mspx
Microsoft Security Bulletin MS09-022
Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution (961501)
»www.microsoft.com/technet/securi···022.mspx
Microsoft Security Bulletin MS09-019
Cumulative Security Update for Internet Explorer (969897)
»www.microsoft.com/technet/securi···019.mspx
Microsoft Security Bulletin MS09-027
Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (969514)
»www.microsoft.com/technet/securi···027.mspx
Microsoft Security Bulletin MS09-021
Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)
»www.microsoft.com/technet/securi···021.mspx
Microsoft Security Bulletin MS09-024
Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution (957632)
»www.microsoft.com/technet/securi···024.mspx
Important (3)
Microsoft Security Bulletin MS09-026
Vulnerability in RPC Could Allow Elevation of Privilege (970238)
»www.microsoft.com/technet/securi···026.mspx
Microsoft Security Bulletin MS09-025
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)
»www.microsoft.com/technet/securi···025.mspx
Microsoft Security Bulletin MS09-020
Vulnerabilities in Internet Information Services (IIS) Could Allow Elevation of Privilege (970483)
»www.microsoft.com/technet/securi···020.mspx
Moderate (1)
Microsoft Security Bulletin MS09-023
Vulnerability in Windows Search Could Allow Information Disclosure (963093)
»www.microsoft.com/technet/securi···023.mspx
Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.
If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety 1-866-727-2338. International customers should contact their local subsidiary.
As always, download the updates only from the vendors website - visit Windows Update and Office Update or Microsoft Update websites. You may also get the updates thru Automatic Updates functionality in Windows system.
Security Tool
Find out if you are missing important Microsoft product updates by using MBSA.
--
Microsoft® Security MVP, 2004 - 2009
DP's Security Bits |
|
 Pole883Premium
join:2004-01-27
Schenectady, NY
kudos:2 | Thank you...........gettin' them now!!
Be well.....
Mike |
|
|
|
 BabarPremium
join:2001-05-09
Washington | reply to dp
Many thanks, dp! |
|
Reviews:
 ·Zen Internet
| reply to dp
many thanks don 
TechNet Webcast: Information About Microsoft June Security Bulletins (Level 200)
Event ID: 1032395225
Language(s): English.
Product(s): Security.
Audience(s): IT Professional.
Duration: 90 Minutes
Start Date: Wednesday, June 10, 2009 11:00 AM Pacific Time (US & Canada)
Event Overview
On June, 10, 2009, Microsoft releases its monthly security bulletins. Join us for a brief overview of the technical details of the June bulletins. We intend to address your concerns in this webcast, therefore, most of the webcast is devoted to attendees asking questions about the bulletins and getting answers from Microsoft security experts.
Presenters: Adrian Stone, Senior Security Program Manager Lead, Microsoft Corporation and Christopher Budd, Security Response Communications Lead, Microsoft Corporation
Register now for the june security bulletin webcast.
--
Wilders Security Forum Admin
Microsoft MVP - Consumer Security
|
|
Reviews:
·Zen Internet
| reply to dp
Malicious Software Removal Tool
Published: January 11, 2005 | Updated: June 9, 2009
New Additions
We have added detection and cleaning capabilities for the following malicious software:
• InternetAntivirus
»www.microsoft.com/security/porta···ntivirus
»www.microsoft.com/downloads/deta···ylang=en
--
Wilders Security Forum Admin
Microsoft MVP - Consumer Security
|
|
 MarkAWBarry WhitePremium
join:2001-08-27
Canada
kudos:16
1 edit | reply to dp
Thanks dp  and NICK ADSL UK . Got six for my XP Pro SP3 and XP Home SP3 systems. |
|
 ThrowDemsOutIf you can't convince 'em, confuse 'emPremium
join:2002-03-03
Mullica Hill, NJ
kudos:4
1 edit | reply to dp
12 patches applied to my 2 Windows Vista SP2 Home Premium 32 bit systems. So far, everything looks OK.
|
|
 trparkyApple... YUMPremium,MVM
join:2000-05-24
Cleveland, OH
kudos:1
 ·Time Warner Cable
 ·Time Warner VOIP
 ·AT&T U-Verse
| 
Updates for Windows Vista 64-bit SP2 |
--
Tom |
|
 jabarnutLight Years AwayPremium,MVM
join:2005-01-22
Galaxy M31
kudos:1
1 edit | reply to dp
Wow! That time of the Month already? 
As usual, thanks for the heads up folks.
Installed 12 total updates on two of my XP machines.
Six for XP (Including the IE8 patch, as well as the MSRT).
Also 3 for Office 2002/XP.
Interestingly, also 3 for Office 2007 (which I don't have on these machines).
I do however have the compatibility pack for 2007 installed, so I figure that's what prompted it...I went ahead and installed them.
Haven't dealt with my Vista machines yet, but all seems well here on my XP machines. (So far).
Thanks again!
--
I had a life once.....now I have a Computer and a Modem. |
|
 siljalineI'm lovin' that double widePremium
join:2002-10-12
Montreal, QC
kudos:17 | reply to dp
Microsoft Security Advisory: Vulnerability in Microsoft DirectShow could allow remote code execution
»support.microsoft.com/kb/971778
Has MS FixIt enabled. |
|
ThrowDemsOutIf you can't convince 'em, confuse 'emPremium
join:2002-03-03
Mullica Hill, NJ
kudos:4 | reply to ThrowDemsOut
said by ThrowDemsOut:12 patches applied to my 2 Windows Vista SP2 Home Premium 32 bit systems. So far, everything looks OK. [att=x] Also, Windows 7 RC picked up these 4 patches:
--
My BLOG .. .. Internet News .. .. My Web Page |
|
 MagManLife is simpler when you tell the truth.Premium
join:2003-10-01
Westlake, OH | reply to dp
Thanks, I forgot it was second Tues. |
|
Reviews:
·Zen Internet
| reply to dp
June 2009 Security Release ISO Image
Brief Description
This DVD5 ISO image file contains the security updates for Windows released on Windows Update on June 9th, 2009.
»www.microsoft.com/downloads/deta···b3169d16
--
Wilders Security Forum Admin
Microsoft MVP - Consumer Security
|
|
ThrowDemsOutIf you can't convince 'em, confuse 'emPremium
join:2002-03-03
Mullica Hill, NJ
kudos:4 | reply to dp
News story on all the patches today:
»tech.yahoo.com/news/zd/20090609/tc_zd/241202
The company patched a total of 31 vulnerabilities in the update, with some being highly exploitable.
The most serious one is the update for Internet Explorer, MS09-019: Cumulative Security Update for Internet Explorer. This update addresses a critical vulnerability on every client version of Windows. 8 separate vulnerabilities are patched in this update
5 of the other 7 vulnerabilities are some sort of HTML or DHTML "Object Memory Corruption Vulnerability". One of them is interesting for affecting only Internet Explorer 8
Only one of the other vulnerabilities has an exploitability index of 1, meaning that functioning exploit code is likely. It is rated critical only on IE6 on Windows XP and doesn't affect IE7 or IE8. 2 other vulnerabilities in IE7 on Vista could result in "inconsistent" exploit code.
--
My BLOG .. .. Internet News .. .. My Web Page |
|
| reply to dp
Got 6 for XP PRO and XP Home machines-all installed without a problem. |
|
 dadkinsCan you do Blu?Premium,MVM
join:2003-09-26
Hercules, CA
kudos:18
2 edits | reply to dp
XP MCE 2005 | 
Vista Home Premium |
9 for Vista Home Premium.
2 for Windows 7 - Realtek Audio driver and Windows Defender update - that's it.
|
|
| reply to dp
Hmm .. so, right after allowing 9 updates (critical and important - one of which was IE8, but haven't allowed IE8 on my XP Pro SP2 DT, yet) to my Vista64 LT ..
I immediately get notification of additional updates. It's service pack 2 .. and it's reporting the download size at between 564.3MB - 567.3MB.
(blink - blink) ??
What's up with SP2 for Vista64 ? .. are folks installing it?
--
Eagles may soar .. but weasels don't get sucked into jet engines. |
|
trparkyApple... YUMPremium,MVM
join:2000-05-24
Cleveland, OH
kudos:1 | I have SP2 installed, got it early by downloading it off of TechNet.
--
Tom |
|
| Was it 500+MB?? |
|
3 edits | reply to dp
Two Vista Home Premium SP2/IE8 systems with MS Office 2007 got 15 updates each.
One XP Home SP3/IE8 system with MS Office 2003 got 7 updates.
All are running fine. |
|
