-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA10-285A Microsoft Updates for Multiple Vulnerabilities Original release date: October 12, 2010 Last revised: -- Source: US-CERT Systems Affected * Microsoft Windows * Microsoft Office * Internet Explorer Overview There are multiple vulnerabilities in Microsoft Windows, Microsoft Office, and Internet Explorer. Microsoft has released updates to address these vulnerabilities. I. Description The Microsoft Security Bulletin Summary for October 2010 describes multiple vulnerabilities in Microsoft Windows, Microsoft Office, and Internet Explorer. Microsoft has released updates to address the vulnerabilities. II. Impact A remote, unauthenticated attacker could execute arbitrary code or cause a vulnerable system or application to crash. III. Solution Apply updates Microsoft has provided updates for these vulnerabilities in the Microsoft Security Bulletin Summary for October 2010. That bulletin describes any known issues related to the updates. Administrators are encouraged to note these issues and test for any potentially adverse effects. In addition, administrators should consider using an automated update distribution system such as Windows Server Update Services (WSUS). IV. References * Microsoft Security Bulletin Summary for October 2010 - <http://www.microsoft.com/technet/security/bulletin/ms10-oct.mspx> * Microsoft Windows Server Update Services - <http://technet.microsoft.com/en-us/wsus/default.aspx> ____________________________________________________________________ The most recent version of this document can be found at: <http://www.us-cert.gov/cas/techalerts/TA10-285A.html> ____________________________________________________________________ Feedback can be directed to US-CERT Technical Staff. Please send email to <cert@xxxxxxxx> with "TA10-285A Feedback VU#220143" in the subject. ____________________________________________________________________ For instructions on subscribing to or unsubscribing from this mailing list, visit <http://www.us-cert.gov/cas/signup.html>. ____________________________________________________________________ Produced 2010 by US-CERT, a government organization. Terms of use: <http://www.us-cert.gov/legal.html> ____________________________________________________________________ Revision History October 12, 2010: Initial release -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQEVAwUBTLSbkT6pPKYJORa3AQL48ggAsGtbVyaWwbvCrIgTuKMSS40ScAJ63H/Z JmwDhgnkvfiT/n/AVv9jx3ApE8Q3y1l20bvd2AcfIQ5MqU8Ep68WC4CLGkVTnwH2 eyMuyegQg8fMXVB4qzcF9CYfcbRsBqW1H0PuZTdDCJZcETR8V9VFXHKKSes7B5gr qM0/dSkZ+k/kaQWvNyGifV8OaK0z58YCrY8iOdHFVtoWiNUMm/BO4z/MkZykS/a8 6BOmRwT8JpVlN9mbcH6JfSwT0jhBA3agOlaw6yF4sA5piVxbcfMAPgw59sq4yt50 GNbWWbWMoc/Xv10t/4JFlKf2DorKp9Vniqlmnti6xQ4iyv7fIDfDEQ== =IXMY -----END PGP SIGNATURE-----