The table below lists the Microsoft vulnerabilities for September.

MS Bulletin Number	Microsoft Bulletin Title	Severity	Impact of Vulnerability	Affected Software	CVE ID
MS09-045	Vulnerability in JScript Scripting Engine Could Allow Remote Code Execution (971961)	Critical	Remote Code Execution	Microsoft Windows	CVE-2009-1132
MS09-046	Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844)	Critical	Remote Code Execution	Microsoft Windows	CVE-2009-2519
MS09-047	Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)	Critical	Remote Code Execution	Microsoft Windows	CVE-2009-2498 CVE-2009-2499
MS09-048	Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (967723)	Critical	Remote Code Execution	Microsoft Windows	CVE-2008-4609 CVE-2009-1925 CVE-2009-1926
MS09-049	Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710)	Critical	Remote Code Execution	Microsoft Windows	CVE-2009-1132

Threat Remediation

Fortinet provides coverage on Microsoft vulnerabilities in September 2009.

CVE Number	Signature Name
CVE-2009-1132	MS.JScript.Keyword.Override.Code.Execution
CVE-2009-2519	MS.DHTML.Editing.Component.ActiveX.Control.Code.Execution
CVE-2009-2498	MS.Windows.ASF.Invalid.Free.Code.Execution
CVE-2009-2499	MS.Media.MP3.Memory.Corruption
CVE-2009-1926	TCP.Window.Size.Zero.DoS

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Tuesday, September 8, 2009	1	Initial Documentation.

Reference:

• Microsoft Security Bulletin Summary for September 2009: http://www.microsoft.com/technet/security/bulletin/ms09-sep.mspx