Microsoft Security Bulletin for February 09, 2010
2010.February.09
The table below lists the Microsoft vulnerabilities for February.
| MS Bulletin Number | Microsoft Bulletin Title | Severity | Impact of Vulnerability | Affected Software | CVE ID |
|---|
| MS10-003 | Vulnerability in Microsoft Office (MSO)) Could Allow Remote Code Execution (978214) | Important | Remote Code Execution | Microsoft Office | CVE-2010-0243 |
| MS10-004 | Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (975416) | Important | Remote Code Execution | Microsoft Office | CVE-2010-0029 CVE-2010-0030 CVE-2010-0031 CVE-2010-0032 CVE-2010-0033 CVE-2010-0034 |
| MS10-005 | Vulnerability in Microsoft Paint Could Allow Remote Code Execution (978706) | Moderate | Remote Code Execution | Microsoft Windows | CVE-2010-0028 |
| MS10-006 | Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251) | Critical | Remote Code Execution | Microsoft Windows | CVE-2010-0016 CVE-2010-0017 |
| MS10-007 | Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713) | Critical | Remote Code Execution | Microsoft Windows | CVE-2010-0027 |
| MS10-008 | Cumulative Security Update of ActiveX Kill Bits (978262) | Critical | Remote Code Execution | Microsoft Windows | |
| MS10-009 | Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (974145) | Critical | Remote Code Execution | Microsoft Windows | CVE-2010-0239 CVE-2010-0240 CVE-2010-0241 CVE-2010-0242 |
| MS10-010 | Vulnerability in Windows Server 2008 Hyper-V Could Allow Denial of Service (977894) | Important | Denial of Service | Microsoft Windows | CVE-2010-0026 |
| MS10-011 | Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (978037) | Important | Elevation of Privilege | Microsoft Windows | CVE-2010-0023 |
| MS10-012 | Vulnerabilities in SMB Server Could Allow Remote Code Execution (971468) | Important | Remote Code Execution | Microsoft Windows | CVE-2010-0020 CVE-2010-0021 CVE-2010-0022 CVE-2010-0231 |
| MS10-013 | Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (977935) | Critical | Remote Code Execution | Microsoft Windows | CVE-2010-0250 |
| MS10-014 | Vulnerability in Kerberos Could Allow Denial of Service (977290) | Important | Denial of Service | Microsoft Windows | CVE-2010-0035 |
| MS10-015 | Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (977165) | Important | Elevation of Privilege | Microsoft Windows | CVE-2010-0232 CVE-2010-0233 |
Threat Remediation
Fortinet provides coverage on Microsoft vulnerabilities in February 09, 2010.
For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.
Document History
| Revision Date | Version Number | |
|---|
| Tuesday, February 09 2010 | 1 | Initial Documentation. |
Reference:
Disclaimer:
Although Fortinet has attempted to provide accurate information in these materials, Fortinet assumes no legal responsibility for the accuracy or completeness of the information. More specific information is available on request from Fortinet. Please note that Fortinet's product information does not constitute or contain any guarantee, warranty or legally binding representation, unless expressly identified as such in a duly signed writing. About Fortinet ( www.fortinet.com ):
Fortinet is the pioneer and leading provider of ASIC-accelerated unified threat management, or UTM, security systems, which are used by enterprises and service providers to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection--including firewall, antivirus, intrusion prevention, VPN, spyware prevention and anti-spam -- designed to help customers protect against network and content level threats. Leveraging a custom ASIC and unified interface, Fortinet solutions offer advanced security functionality that scales from remote office to chassis-based solutions with integrated management and reporting. Fortinet solutions have won multiple awards around the world and are the only security products that are certified in six programs by ICSA Labs: (Firewall, Antivirus, IPSec, SSL, Network IPS, and Anti-Spyware). Fortinet is privately held and based in Sunnyvale, California.
|
