The table below lists the Microsoft vulnerabilities for August.

MS Bulletin Number	Microsoft Bulletin Title	Severity	Impact of Vulnerability	Affected Software	CVE ID
MS10-046	Vulnerability in Windows Shell Could Allow Remote Code Execution (2286198)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-2568
MS10-049	Vulnerabilities in SChannel Could Allow Remote Code Execution (980436)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-2566 CVE-2009-3555
MS10-051	Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2079403)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-2561
MS10-052	Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (2115168)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-1882
MS10-053	Cumulative Security Update for Internet Explorer (2183461)	Critical	Remote Code Execution	Microsoft Windows, Internet Explorer	CVE-2010-2557 CVE-2010-2560 CVE-2010-2556 CVE-2010-2558 CVE-2010-2559 CVE-2010-1258
MS10-054	Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-2550 CVE-2010-2551 CVE-2010-2552
MS10-055	Vulnerability in Cinepak Codec Could Allow Remote Code Execution (982665)	Critical	Remote Code Execution	Microsoft Windows	CVE-2010-2553
MS10-056	Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (2269638)	Critical	Remote Code Execution	Microsoft Office	CVE-2010-1900 CVE-2010-1901 CVE-2010-1902 CVE-2010-1903
MS10-060	Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution (2265906)	Critical	Remote Code Execution	Microsoft Windows, Microsoft .NET Framework, Microsoft Silverlight	CVE-2010-0019 CVE-2010-1898
MS10-047	Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (981852)	Important	Elevation of Privilege	Microsoft Windows	CVE-2010-1888 CVE-2010-1889
MS10-048	Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2160329)	Important	Elevation of Privilege	Microsoft Windows	CVE-2010-1894 CVE-2010-1895 CVE-2010-1896 CVE-2010-1897
MS10-050	Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (981997)	Important	Remote Code Execution	Microsoft Windows	CVE-2010-2564
MS10-057	Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution (2269707)	Important	Remote Code Execution	Microsoft Office	CVE-2010-2562
MS10-058	Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)	Important	Elevation of Privilege	Microsoft Windows	CVE-2010-1893 CVE-2010-1892
MS10-059	Vulnerabilities in the Tracing Feature for Services Could Allow an Elevation of Privilege (982799)	Important	Elevation of Privilege	Microsoft Windows	CVE-2010-2555

Threat Remediation

Fortinet provides coverage on Microsoft vulnerabilities in August 10, 2010.

CVE Number	Signature Name
CVE-2010-0019	MS.Silverlight.Memory.Corruption
CVE-2010-1882	MS.MPEG.Audio.Decoder.Buffer.Overflow
CVE-2010-1901	MS.Word.RTF.Parsing.Engine.Memory.Corruption
CVE-2010-2553	MS.Cinepak.Codec.Decompression.Code.Execution
CVE-2010-2557	MS.IE.Close.Event.Handling.Memory.Corruption
CVE-2010-2560	MS.IE.HTML.Layout.Memory.Corruption
CVE-2010-2562	MS.Excel.SXVI.iCache.Memory.Corruption
CVE-2010-2564	MS.Movie.Maker.Memory.Corruption
CVE-2010-1902	MS.Word.RTF.Parsing.Buffer.Overflow
CVE-2010-1903	MS.Word.Linked.Objects.Memory.Corruption
CVE-2010-2550	MS.SMB.Server.Code.Execution
CVE-2010-2556	MS.IE.Iframe.Uninitialized.Memory.Corruption
CVE-2010-2559	MS.IE.Stytle.Changing.Memory.Corruption
CVE-2010-2561	MS.XML.Core.Services.Memory.Corruption
CVE-2010-1258	MS.IE.Event.Handler.Cross.Domain.Information.Disclosure
CVE-2010-2551	MS.SMB.Variable.Validation
CVE-2010-2552	MS.SMB.Stack.Exhaustion

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Tuesday, August 10 2010	1	Initial Documentation.

Reference:

• Microsoft Security Bulletin Summary for August 10, 2010: http://www.microsoft.com/technet/security/bulletin/ms10-aug.mspx