The table below lists the Microsoft vulnerabilities for February.

MS Bulletin Number	Microsoft Bulletin Title	Severity	Impact of Vulnerability	Affected Software	CVE ID
MS10-003	Vulnerability in Microsoft Office (MSO)) Could Allow Remote Code Execution (978214)	Important	Remote Code Execution	Microsoft Office	CVE-2010-0243
MS10-004	Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (975416)	Important	Remote Code Execution	Microsoft Office	CVE-2010-0029 CVE-2010-0030 CVE-2010-0031 CVE-2010-0032 CVE-2010-0033 CVE-2010-0034
MS10-005	Vulnerability in Microsoft Paint Could Allow Remote Code Execution (978706)	Moderate	Remote Code Execution	Microsoft Windows	CVE-2010-0028
MS10-006	Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-0016 CVE-2010-0017
MS10-007	Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-0027
MS10-008	Cumulative Security Update of ActiveX Kill Bits (978262)	Critical	Remote Code Execution	Microsoft Windows
MS10-009	Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (974145)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-0239 CVE-2010-0240 CVE-2010-0241 CVE-2010-0242
MS10-010	Vulnerability in Windows Server 2008 Hyper-V Could Allow Denial of Service (977894)	Important	Denial of Service	Microsoft Windows	CVE-2010-0026
MS10-011	Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (978037)	Important	Elevation of Privilege	Microsoft Windows	CVE-2010-0023
MS10-012	Vulnerabilities in SMB Server Could Allow Remote Code Execution (971468)	Important	Remote Code Execution	Microsoft Windows	CVE-2010-0020 CVE-2010-0021 CVE-2010-0022 CVE-2010-0231
MS10-013	Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (977935)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-0250
MS10-014	Vulnerability in Kerberos Could Allow Denial of Service (977290)	Important	Denial of Service	Microsoft Windows	CVE-2010-0035
MS10-015	Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (977165)	Important	Elevation of Privilege	Microsoft Windows	CVE-2010-0232 CVE-2010-0233

Threat Remediation

Fortinet provides coverage on Microsoft vulnerabilities in February 09, 2010.

CVE Number	Signature Name
CVE-2010-0016	MS.SMB.Remote.Code.Execution
CVE-2010-0020	MS.SMB.Server.pathname.Buffer.Overflow
CVE-2010-0022	MS.SMB.Server.servername.DoS
CVE-2010-0027	MS.Shell.Handler.Remote.Code.Execution
CVE-2010-0028	MS.Paint.Integer.Overflow
CVE-2010-0031	MS.Offfice.PowerPoint.OEPlaceholderAtom.Invalid.Array.Indexing
CVE-2010-0032	MS.Office.PowerPoint.OEPlaceholderAtom.Memory.Corruption
CVE-2010-0035	MS.Kerberos.TGT.Renew.DOS
CVE-2010-0231	MS.SMB.Server.Privilege.Elevation
CVE-2010-0243	MS.Office.MSO.DLL.Buffer.Overflow
CVE-2010-0250	MS.DirectShow.Remote.Code.Execution

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Tuesday, February 09 2010	1	Initial Documentation.

Reference:

• Microsoft Security Bulletin Summary for February 09, 2010: http://www.microsoft.com/technet/security/bulletin/ms10-feb.mspx