Submit a Story!
Microsoft security bulletin summary for November 2009
Read the security bulletin advance notification for an overview of the November 10, 2009 security bulletin release. Posted on Thu, November 05 2009
Microsoft Security Bulletin MS09-063 - Critical
microsoft.com — This security update resolves a privately reported vulnerability in the Web Services on Devices Application Programming Interface (WSDAPI) on the Windows operating system. The vulnerability could allow remote code execution if an affected Windows ... (more) Microsoft Security Bulletin MS09-063 - Critical
Comments
Blog Reactions

Microsoft plans six patches next week, ties November record
Netflash — ... Last month, Microsoft released the first patches for Windows 7's final code. "There aren't any Windows 7 patches at all," Storms said. "So, so far so good." Windows 7 will be worth watching, however. "It will be more interesting down the road to see if Microsoft disclosed bugs they found in Windows 7, and fixed during development, but are just now going back and fixing in the older OSes." Another update to watch carefully next week is the one Microsoft named "Bulletin 3" in its advance notification , the monthly forewarning that includes only the barest of details. That ...

November 2009 Bulletin Release Advance Notification
The Microsoft Security Response Center (MSRC)Advance Notification for the November 2009 Security Bulletin Release To help customers plan and prioritize for this month’s security updates, we wanted to let you know that we will be releasing 6 bulletins (three critical and three important) addressing 15 vulnerabilities, affecting Windows and Microsoft Office products. Customers should plan a restart for the Windows bulletins. The Office bulletins may not require a restart if the components being updated are not in use. More information about the upcoming security ...

Critical Windows Security Bulletins on Tap For Patch Tuesday
eWeek - RSS Feeds — Microsoft is releasing six security bulletins next week as part of Patch Tuesday. Three of the bulletins address Windows security issues Microsoft has rated 'critical.' Microsoft will release six bulletins next week for Patch Tuesday, including three critical bulletins focused on Windows security. All totaled, 15 security vulnerabilities will be fixed in this release. Besides the critical Windows bulletins, are three others rated 'important.' Among them is a fourth bulletin impacting Windows. Unlike last month, none affect Windows 7, which was the subkect of ...

Microsoft to Patch Windows, Office Next Week
Security Watch — Microsoft has announced in their Security Bulletin Advance Notification for November 2009 that next Tuesday, November 10, 2009, they will release 6 security bulletins and updates to fix the security problems the bulletins address. 4 of the bulletins are for Windows and 2 for Office. 3 of the Windows bulletins have a maximum rating of Critical. The other bulletins max out at Important. Windows XP, Vista, and Server 2003 and 2008 all have one critical vulnerability and Windows 2000 has 2. Windows 7, which did have updates last month, does not appear in the lists of affected products this month. Both Office bulletins are rated Important for all ...

Patch Tuesday: Expect Six Security Fixes
Redmond Report — ... Patch Tuesday: Expect Six Security Fixes After a record-breaking Patch Tuesday in October, November's security update promises to be a bit lighter with six scheduled fixes, three deemed "critical" and three "important." This month's patch rollout is expected to have five bulletins addressing remote code execution vulnerabilities, while the remaining fix will address denial-of-service issues. The first scheduled fix will be a critical bulletin affecting Vista and Windows Server 2008. The second critical fix affects only Windows 2000. Meanwhile, the third and final critical ...

Microsoft Security Patch Release November 2009 Advance Notification
Sunnet Beskerming Security Advisories — Following the massive patch release last month last month, this month Microsoft are planning to release six patches, three Critical, and three Important. Four of the bulletins (all of the Critical and one of the Important) are for Windows system components and address remote code execution (Critical) and denial of service (Important) vulnerabilities, while the remaining two Important patches address remote code execution vulnerabilities in Office components, currently identified as Excel and Word. Unlike last month's release, this month's bulletins are not ...

Microsoft Plans Fixes For 15 Security Flaws
InformationWeek Infrastructure News — After last month's record-setting security patch , Microsoft's November patch brings a vastly diminished workload for IT administrators. Microsoft next Tuesday plans to release 6 bulletins -- three designated "critical" and three designated "important" -- to address 15 vulnerabilities. Windows 7 users can kick back and relax: Microsoft's newly released operating system is unaffected by these bulletins. Four of the bulletins, three of which are rated "critical," affect Windows. Two, both "important," affect Microsoft Office for Windows and Mac. Paul Henry, forensics and security analyst at Lumension , says that three of the ...

Tenable Network Security Podcast - Episode 11
Security Bloggers Network — ... Patch Tuesday - Heads Up! - As many of you know, I’m not the biggest fan of the “Patch Tuesday” scheduling and culture. For more information about my views on this subject you can read my guest post on the FUDSEC blog titled “ ...

November 2009 Security Bulletin Release
The Microsoft Security Response Center (MSRC) — ... Today, we released six security bulletins addressing a total of 15 vulnerabilities. Four affect Windows and Windows Server and two affect Microsoft Office products (Excel and Word). ...

Microsoft Issues 6 Updates, 3 Critical, for Windows and Office
Security Watch — Microsoft issued 6 updates to Windows and Office today, fixing 15 vulnerabilities. 3 of the updates are rated Critical. Some are quite serious, especially on Windows 2000, XP and Server 2003. Windows 7 is not affected by any of the vulnerabilities revealed today. The three Critical updates are: MS09-063: Vulnerability in Web Services on Devices API Could Allow Remote Code Execution—This flaw could allow a system or device on the local subnet potentially to execute remote code. Microsoft considers reliable exploit code unlikely for this vulnerability. Only Windows Vista and Windows Server 2008 are affected by this ...

Microsoft Issues Critical Windows Security Patches
eWeek - RSS Feeds — Microsoft released six security bulletins for this month's Patch Tuesday, covering 15 vulnerabilities. Three of the bulletins are rated critical and are aimed at Windows security. Microsoft released six patches today to cover 15 security vulnerabilities. Three of the bulletins cover critical ...

Patch Tuesday Bottomline - November 2009
Security Bloggers Network — Today Microsoft released patches for 6 security updates that address 15 individual vulnerabilities. Three patches were rated as critical and the other 3 are rates as important. Here is a recap of today’s advisory: MS09-065 was rated as Critical due to the EOT (Embedded Open Type Font) vulnerability in which an attacker can execute arbitrary commands on the victim’s computer. This can be achieved by enticing the victim to visit a web page with malicious EOT fonts or open an e-mail which contains malicious content. A proof of concept that causes the application to crash is publicly disclosed. All Windows operating systems ...

Microsoft Patch Brings Windows Kernel Warning
InformationWeek Infrastructure News — Weighing in at about half the size of its giant October security patch, Microsoft's November security patch includes six security bulletins to address 15 vulnerabilities in Windows, Windows Server and Microsoft Office. Three of the bulletins are designated "critical" and three are designated "important." None of the bulletins affect Windows 7, which was officially released late last month, or Windows Server 2008 R2. One of the critical vulnerabilities, addressed in MS09-065, is also rated 1 on Microsoft's Exploitability Index Rating, meaning that exploit code is likely. ...

Microsoft Security Patches for November announced
Blade WatchMicrosoft Published: November 10, 2009 Version: 1.0 This bulletin summary lists security bulletins released for November 2009. With the release of the bulletins for November 2009, this bulletin summary replaces the bulletin advance ...

Hefty November Patch Adds to IT Woes
Redmond Report — ... Hefty November Patch Adds to IT Woes Microsoft rolled out six security fixes in its November patch on Tuesday. No records were broken, but this patch -- with its three "critical" and three "important" bulletins -- represents as much as has been seen in past November releases. A hefty patch release may not have been what IT pros wanted to see this month. They may still be reeling from Microsoft's last security release in October, when Microsoft delivered a massive 13 bulletins at once. Critical Items The first item in the critical batch of security updates concerns only Vista ...

November 2009
Essential Computer Security — ... To view a summary of the November 2009 bulletins, visit Microsoft Security Bulletin Summary for November, 2009. Click the links below to view the individual Microsoft Security Bulletins and to download any patches that might be required for your system. Microsoft will discuss the issues addressed in the Security Bulletins and field questions from users ...

Related: microsoft security bulletin november 2009
Microsoft Security Bulletin for November 2009FGCenter - Latest Threats, Advisories, Reports and News
The table below lists the Microsoft vulnerabilities for November. MS Bulletin Number Microsoft Bulletin Title Severity Impact of Vulnerability Affected Software CVE ID MS09-063 Vulnerability in Web Services on Devices API Could Allow Remote Code Execution (973565) Critical Remote Code ...
Microsoft Releases November Security BulletinUS-CERT Current Activity
(added November 10, 2009) A full-content feed is available at http://www.us-cert.gov/current/index.atom
Microsoft Releases Advance Notification for November Security BulletinUS-CERT Current Activity
(added November 5, 2009) A full-content feed is available at http://www.us-cert.gov/current/index.atom