Microsoft has released its monthly security bulletin for September 2008 to address four critical vulnerabilities in Windows and Internet Explorer. We strongly suggest applying the patches provided by Microsoft for these vulnerabilities.
Following is a summary of the security updates released by Microsoft:
Critical
Vulnerability in Windows Media Player Could Allow Remote Code Execution
This security update resolves a privately reported vulnerability in Windows Media Player that could allow remote code execution when a specially crafted audio file is streamed from a Windows Media server.
Microsoft has already addressed this vulnerability with a patch. The patch and additional information are available here.
Vulnerabilities in GDI+ Could Allow Remote Code Execution
This security update resolves several privately reported vulnerabilities in Microsoft Windows GDI+. These vulnerabilities could allow remote code execution if a user viewed a specially crafted image file using affected software or browsed a Web site that contains specially crafted content.
Microsoft has already addressed this vulnerability with a patch. The patch and additional information are available here.
Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution
This security update resolves a privately reported vulnerability in Windows Media Encoder 9 Series. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page.
Microsoft has already addressed this vulnerability with a patch. The patch and additional information are available here.
Vulnerability in Microsoft Office Could Allow Remote Code Execution
This security update resolves a privately reported vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a user clicks a specially crafted OneNote URL. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
Microsoft has already addressed this vulnerability with a patch. The patch and additional information are available here.
References:
• June 2008 Monthly Release
• Microsoft Security Bulletin Summary for June 2008
