MVP Jubo Security Blog

The Blog

Recent Posts

Tags

News

  • Kim's Journal
    My wife's blog, the "alternative" truth...


    MVPs
    2003 - 2004 - 2005 - 2006 - 2007 - 2008 - 2009


    Jubo








    Locations of visitors to this page

Community

Email Notifications

MVP Sites

Microsoft Links

Blogs

Security Forums

Microsoft Blogs

Archives

Microsoft Security Bulletin Summary for February 2010

It looks as if I've been away here for a long time... oh, wait... I have been. All because of housing problems and also a lot of computer problems. Strange things happen when you get a cup of apple juice over your keyboard...;)  Now that we have a very nice new laptop thing could be better here again. So, it's almost three months later and in this time I hope you have updated your computer with the latest Windows updates and patches. To make sure here's the list of February, which was a bit big this month. For February Microsoft has 5 "critical", 7 "important" and 1 "moderate" patches.

Critical:

  • MS10-006 - Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)
  • MS10-007 - Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713)
  • MS10-008 - Cumulative Security Update of ActiveX Kill Bits (978262)
  • MS10-009 - Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (974145)
  • MS10-013 - Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (977935)

Important:

  • MS10-003 - Vulnerability in Microsoft Office (MSO) Could Allow Remote Code Execution (978214)
  • MS10-004 - Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (975416)
  • MS10-010 - Vulnerability in Windows Server 2008 Hyper-V Could Allow Denial of Service (977894)
  • MS10-011 - Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (978037)
  • MS10-012 - Vulnerabilities in SMB Server Could Allow Remote Code Execution (971468)
  • MS10-014 - Vulnerability in Kerberos Could Allow Denial of Service (977290)
  • MS10-015 - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (977165)

Moderate:

  • MS10-005 - Vulnerability in Microsoft Paint Could Allow Remote Code Execution (978706)

A more technical version of the Security Bulletin can be found at Microsoft TechNet and an end-user version is available at Microsoft's Security website.

See also the MSRC blog: February 2010 Security Bulletin Release. And the Security Research and Defense blog for additional technical information on these updates.

Enjoying a Caffe Mocha at my favorite Starbucks in Seattle... Have a wonderful day!