The table below lists the Microsoft vulnerabilities for October.

MS Bulletin Number	Microsoft Bulletin Title	Severity	Impact of Vulnerability	Affected Software	CVE ID
MS09-050	Vulnerabilities in SMBv2 Could Allow Remote Code Execution (975517)	Critical	Remote Code Execution	Microsoft Windows	CVE-2009-2526 CVE-2009-2532 CVE-2009-3103
MS09-051	Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (975682)	Critical	Remote Code Execution	Microsoft Windows	CVE-2009-0555 CVE-2009-2525
MS09-052	Vulnerability in Windows Media Player Could Allow Remote Code Execution (974112)	Critical	Remote Code Execution	Microsoft Windows	CVE-2009-2527
MS09-053	Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution (975254)	Important	Remote Code Execution	Microsoft Windows	CVE-2009-2521 CVE-2009-3023
MS09-054	Cumulative Security Update for Internet Explorer (974455)	Critical	Remote Code Execution	Microsoft Windows,Internet Explorer	CVE-2009-1547 CVE-2009-2529 CVE-2009-2530 CVE-2009-2531
MS09-055	Cumulative Security Update of ActiveX Kill Bits (973525)	Critical	Remote Code Execution	Microsoft Windows	CVE-2009-2493
MS09-056	Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571)	Important	Spoofing	Microsoft Windows	CVE-2009-2510 CVE-2009-2511
MS09-057	Vulnerability in Indexing Service Could Allow Remote Code Execution (969059)	Important	Remote Code Execution	Microsoft Windows	CVE-2009-2507
MS09-058	Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (971486)	Important	Elevation of Privilege	Microsoft Windows	CVE-2009-2515 CVE-2009-2516 CVE-2009-2517
MS09-059	Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (975467)	Important	Denial of Service	Microsoft Windows	CVE-2009-2524
MS09-060	Vulnerabilities in Microsoft Active Template Library (ATL)) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution (973965)	Critical	Remote Code Execution	Microsoft Office	CVE-2009-0901 CVE-2009-2493 CVE-2009-2495
MS09-061	Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)	Critical	Remote Code Execution	Microsoft Windows, Microsoft .NET Framework, Microsoft Silverlight	CVE-2009-0090 CVE-2009-0091 CVE-2009-2497
MS09-062	Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488)	Critical	Remote Code Execution	Microsoft Windows,Internet Explorer, Microsoft .NET Framework, Microsoft Office, Microsoft SQL Server, Microsoft Developer Tools, Microsoft Forefront	CVE-2009-2500 CVE-2009-2501 CVE-2009-2502 CVE-2009-2503 CVE-2009-2504 CVE-2009-2518 CVE-2009-2528 CVE-2009-3126

Threat Remediation

Fortinet provides coverage on Microsoft vulnerabilities in October 2009.

CVE Number	Signature Name
CVE-2009-2526	MS.SMBv2.Infinite.Loop.DoS
CVE-2009-2532	MS.SMB2.Negotiation.Handler.Code.Execution
CVE-2009-3103	MS.SMB2.Negotiation.Handler.Code.Execution
CVE-2009-0555	MS.Windows.Media.Runtime.Voice.Sample.Rate.Code.Execution
CVE-2009-2525	MS.Windows.Media.Runtime.Voice.Sample.Rate.Code.Execution
CVE-2009-2527	MS.Windows.Media.Player.Code.Execution
CVE-2009-2521	MS.IIS.FTP.NLST.DoS
CVE-2009-3023	MS.IIS.FTP.NLST.Remote.Code.Execution
CVE-2009-1547	MS.IE.Deflate.Content.Code.Execution
CVE-2009-2530	MS.IE.Event.Object.Code.Execution
CVE-2009-2531	MS.IE.Table.Layout.Code.Execution
CVE-2009-2510	MS.Windows.X509.CN.Spool
CVE-2009-2511	MS.Windows.X509.OID.Spool
CVE-2009-2507	MS.Indexing.Service.Memory.Corruption
CVE-2009-2524	MS.Windows.LSASS.NTLM.Authentication.DoS
CVE-2009-0901	MS.DirectX.MsVidCtl.ActiveX.Control.Access
CVE-2009-2493	MS.ATL.Object.Type.Mismatch.Code.Execution
CVE-2009-2500	MS.Windows.GDI+.WMF.Integer.Overflow
CVE-2009-2501	MS.Windows.GDI+.PNG.Heap.Overflow
CVE-2009-2502	MS.GDIPlus.TIFF.Code.Execution
CVE-2009-2503	MS.GDIPlus.Multiple.Run.Length.Zero.Code.Execution
CVE-2009-2518	Bitmap.Header.BiClrUsed.Integer.Overflow
CVE-2009-2528	MS.Office.Art.Drawing.Remote.Code.Execution
CVE-2009-3126	PNG.Image.Integer.Overflow

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Tuesday, October 13, 2009	1	Initial Documentation.

Reference:

• Microsoft Security Bulletin Summary for October 2009: http://www.microsoft.com/technet/security/bulletin/ms09-oct.mspx