This application requires Javascript for optimal performance.

Microsoft Security Bulletin for February 09, 2010

The table below lists the Microsoft vulnerabilities for February.
MS Bulletin Number Microsoft Bulletin TitleSeverityImpact of VulnerabilityAffected SoftwareCVE ID
MS10-003Vulnerability in Microsoft Office (MSO)) Could Allow Remote Code Execution (978214)ImportantRemote Code ExecutionMicrosoft Office CVE-2010-0243
MS10-004Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (975416)ImportantRemote Code ExecutionMicrosoft Office CVE-2010-0029 CVE-2010-0030 CVE-2010-0031 CVE-2010-0032 CVE-2010-0033 CVE-2010-0034
MS10-005Vulnerability in Microsoft Paint Could Allow Remote Code Execution (978706)ModerateRemote Code ExecutionMicrosoft Windows CVE-2010-0028
MS10-006Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)CriticalRemote Code ExecutionMicrosoft Windows CVE-2010-0016 CVE-2010-0017
MS10-007Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713)CriticalRemote Code ExecutionMicrosoft Windows CVE-2010-0027
MS10-008Cumulative Security Update of ActiveX Kill Bits (978262)CriticalRemote Code ExecutionMicrosoft Windows
MS10-009Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (974145)CriticalRemote Code ExecutionMicrosoft Windows CVE-2010-0239 CVE-2010-0240 CVE-2010-0241 CVE-2010-0242
MS10-010Vulnerability in Windows Server 2008 Hyper-V Could Allow Denial of Service (977894)ImportantDenial of ServiceMicrosoft Windows CVE-2010-0026
MS10-011Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (978037)ImportantElevation of PrivilegeMicrosoft Windows CVE-2010-0023
MS10-012Vulnerabilities in SMB Server Could Allow Remote Code Execution (971468)ImportantRemote Code ExecutionMicrosoft Windows CVE-2010-0020 CVE-2010-0021 CVE-2010-0022 CVE-2010-0231
MS10-013Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (977935)CriticalRemote Code ExecutionMicrosoft Windows CVE-2010-0250
MS10-014Vulnerability in Kerberos Could Allow Denial of Service (977290)ImportantDenial of ServiceMicrosoft Windows CVE-2010-0035
MS10-015Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (977165)ImportantElevation of PrivilegeMicrosoft Windows CVE-2010-0232 CVE-2010-0233


Threat Remediation


Fortinet provides coverage on Microsoft vulnerabilities in February 09, 2010.

CVE NumberSignature Name
CVE-2010-0016MS.SMB.Remote.Code.Execution
CVE-2010-0020MS.SMB.Server.pathname.Buffer.Overflow
CVE-2010-0022MS.SMB.Server.servername.DoS
CVE-2010-0027MS.Shell.Handler.Remote.Code.Execution
CVE-2010-0028MS.Paint.Integer.Overflow
CVE-2010-0031MS.Offfice.PowerPoint.OEPlaceholderAtom.Invalid.Array.Indexing
CVE-2010-0032MS.Office.PowerPoint.OEPlaceholderAtom.Memory.Corruption
CVE-2010-0035MS.Kerberos.TGT.Renew.DOS
CVE-2010-0231MS.SMB.Server.Privilege.Elevation
CVE-2010-0243MS.Office.MSO.DLL.Buffer.Overflow
CVE-2010-0250MS.DirectShow.Remote.Code.Execution

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.


Document History


Revision DateVersion Number
Tuesday, February 09 20101Initial Documentation.


Reference: