-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA12-010A Microsoft Updates for Multiple Vulnerabilities Original release date: January 10, 2012 Last revised: -- Source: US-CERT Systems Affected * Microsoft Windows * Microsoft Developer Tools and Software Overview There are multiple vulnerabilities in Microsoft Windows and Microsoft Developer Tools and Software. Microsoft has released updates to address these vulnerabilities. I. Description The Microsoft Security Bulletin Summary for January 2012 describes multiple vulnerabilities in Microsoft Windows. Microsoft has released updates to address the vulnerabilities. II. Impact A remote, unauthenticated attacker could execute arbitrary code, cause a denial of service, or gain unauthorized access to your files or system. III. Solution Apply updates Microsoft has provided updates for these vulnerabilities in the Microsoft Security Bulletin Summary for January 2012. That bulletin describes any known issues related to the updates. Administrators are encouraged to note these issues and test for any potentially adverse effects. In addition, administrators should consider using an automated update distribution system such as Windows Server Update Services (WSUS). IV. References * Microsoft Security Bulletin Summary for January 2012 - <http://technet.microsoft.com/en-us/security/bulletin/ms12-jan> * Microsoft Windows Server Update Services - <http://technet.microsoft.com/en-us/wsus/default.aspx> ____________________________________________________________________ The most recent version of this document can be found at: <http://www.us-cert.gov/cas/techalerts/TA12-010A.html> ____________________________________________________________________ Feedback can be directed to US-CERT Technical Staff. Please send email to <cert@xxxxxxxx> with "TA12-010A Feedback VU#806915" in the subject. ____________________________________________________________________ For instructions on subscribing to or unsubscribing from this mailing list, visit <http://www.us-cert.gov/cas/signup.html>. ____________________________________________________________________ Produced 2012 by US-CERT, a government organization. Terms of use: <http://www.us-cert.gov/legal.html> ____________________________________________________________________ Revision History January 10, 2012: Initial release -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQEVAwUBTwyNVT/GkGVXE7GMAQL3cQf/QGrbwXlSvf4A26ZlKSl35diecmcmmxQF 8dipsD1evpihNNcYi66QqjjvFnJjMIRW2UPoNZeaCOz/GWdsTLekr/YcVjtd8a1o fDlQEVyYwEkOhJBgIa+h9r2/t8Kc1o0Q9GfRLFtdb8czmkxNuHsHfSuj5kom+a3w 7OrkLeuO0uMa8DbmlQ40NL75Sm4Jmh6zkkfJQw8y02j5IkmUlAlQv2eAooNbcc6Q 4wHt/H2nHtpDpg3KH3HXzGj8Q75BQ+hacFVklPJADl83qROQzVNsOIO+CvhyOZgV +lKzulReTu7bXyhcSgNi9SyW9gDsgGP87iz5BUXsn/csRs9V9pJBQw== =ErKk -----END PGP SIGNATURE-----