Install Microsoft Patches

Since April 2017, Microsoft moved to a Security Update Guide delivery of patches: not one bulletin per product, but many individual updates for each issue and each specific product version. Thus it is not feasible or useful to maintain this list of patches required; I will only keep a list of "known issues", or issues that show that regular updates are important.
See also the BEWAREs.

New Attack Lets Hackers Downgrade Windows to Exploit Patched Flaws https://hackread.com/hackers-downgrade-windows-exploit-patched-flaws/ https://www.safebreach.com/blog/downgrade-attacks-using-windows-updates/ https://www.safebreach.com/blog/update-on-windows-downdate-downgrade-attacks/
PoC Released For Critical Zero-Click Windows Vulnerability https://cybersecuritynews.com/poc-released-zero-click-windows-vulnerability/
Microsoft probes complaints of Edge leaking URLs to Bing https://www.theregister.com/2023/04/26/microsoft_edge_url/
10-year-old Windows bug with 'opt-in' fix exploited in 3CX attack https://www.bleepingcomputer.com/news/microsoft/10-year-old-windows-bug-with-opt-in-fix-exploited-in-3cx-attack/
WinVerifyTrust Signature Validation Vulnerability CVE-2013-3900 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900
PoC exploit for recently patched Microsoft Word RCE is public (CVE-2023-21716) https://www.helpnetsecurity.com/2023/03/06/cve-2023-21716-poc/
Microsoft Windows Contact File / Remote Code Execution (Resurrected) CVE-2022-44666 https://seclists.org/fulldisclosure/2023/Feb/14
INVALID/BOGUS AppLocker rules disable SAFER on Windows 11 22H2 https://seclists.org/fulldisclosure/2023/Feb/13
Defender update deletes Windows Start menu and Taskbar shortcuts https://www.itnews.com.au/news/defender-update-deletes-windows-start-menu-and-taskbar-shortcuts-589741 https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22H2#2998msgdesc
Windows 11 KB5013943 update causes 0xc0000135 application errors https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5013943-update-causes-0xc0000135-application-errors/
InstallerFileTakeOver (privilege escalation, CVE-2021-41379 patch bypass) https://github.com/klinix5/InstallerFileTakeOver
Razer bug lets you become a Windows 10 admin by plugging in a mouse https://www.bleepingcomputer.com/news/security/razer-bug-lets-you-become-a-windows-10-admin-by-plugging-in-a-mouse/
... similar bugs are likely to be found in other software installed by the Windows plug-and-play process.
Windows 10: Microsoft just revealed another Print Spooler bug https://www.zdnet.com/article/windows-10-microsoft-just-revealed-another-print-spooler-bug/
Summer of SAM - Password Hashes Exposed in Recent Versions of Windows https://www.sans.org/newsletters/newsbites/xxiii-56/ https://isc.sans.edu/forums/diary/Summer+of+SAM+incorrect+permissions+on+Windows+1011+hives/27652/
Microsoft Pulls Bad Windows Update https://threatpost.com/microsoft-windows-update-patch-tuesday/163981/ https://www.bleepingcomputer.com/news/microsoft/microsoft-pulls-a-second-windows-ssu-for-blocking-security-updates/
Microsoft patches Defender antivirus zero-day exploited in the wild https://www.bleepingcomputer.com/news/security/microsoft-patches-defender-antivirus-zero-day-exploited-in-the-wild/
Type 1 Font Parsing Remote Code Execution Vulnerability https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/adv200006
What You Need to Know About the Crypt32.dll / CryptoAPI Flaw https://www.sans.org/newsletters/newsbites/xxii/4
Cryptic Rumblings Ahead of First 2020 Patch Tuesday https://krebsonsecurity.com/2020/01/cryptic-rumblings-ahead-of-first-2020-patch-tuesday/
Proof-of-Concept Exploit Code Released for Critical Cryptographic Flaw in Windows 10 https://www.sans.org/newsletters/newsbites/xxii/5
Prevent a worm by updating Remote Desktop Services (CVE-2019-0708) https://blogs.technet.microsoft.com/msrc/2019/05/14/prevent-a-worm-by-updating-remote-desktop-services-cve-2019-0708/
Microsoft's January Meltdown Fix Introduced New Vulnerability http://www.sans.org/newsletters/newsbites/xx/25#3
Total Meltdown? http://blog.frizk.net/2018/03/total-meltdown.html
March 13, 2018 - KB4088875 (Monthly Rollup), KB4088878 (Security-only update) http://support.microsoft.com/en-us/help/4088875 http://support.microsoft.com/en-us/help/4088878
A Stop error occurs ... [on] a 32-Bit (x86) machine with the Physical Address Extension (PAE) mode disabled.
A Stop error occurs on machines that don't support [SSE2].
A new Ethernet [vNIC] may be created with default settings in place of the previously existing vNIC, causing network issues ...
IP address settings are lost after applying this update.
February 13, 2018 - KB4074588 ... http://support.microsoft.com/en-us/help/4074588
... After installing this update, some devices may fail to boot with INACCESSIBLE_BOOT_DEVICE. ...
Januart 31, 2018 - KB4058258 ... http://support.microsoft.com/en-us/help/4058258
... After installing this update, some devices may fail to boot with INACCESSIBLE_BOOT_DEVICE. ...
January 3, 2018 - KB4056892 ... http://support.microsoft.com/en-us/help/4056892
... After installing this update, some devices may fail to boot with INACCESSIBLE_BOOT_DEVICE. ...
Microsoft Security Advisory 4053440 - Securely opening Microsoft Office documents that contain Dynamic Data Exchange (DDE) fields http://technet.microsoft.com/library/security/4053440
Windows devices may fail to boot ... http://support.microsoft.com/en-us/help/4049094
... after installing October 10 version of KB4041676 or KB4041691 ...
A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client http://www.bishopfox.com/blog/2017/10/a-bug-has-no-name-multiple-heap-buffer-overflows-in-the-windows-dns-client/
... fixed by Microsoft in October of 2017 ... This issue can be exploited on a local network without user interaction, and deserves attention and timely patching.
Microsoft Malware Protection Engine Remote Code Execution Vulnerability https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8541
http://seclists.org/microsoft/2017/q2/8
... out-of-band CVE information ...
WinXP patches of MS17-010 released:
Customer Guidance for WannaCrypt attacks http://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/
Microsoft Security Advisory 4021279 - Vulnerabilities in .NET Core, ASP.NET Core Could Allow Elevation of Privilege http://technet.microsoft.com/library/security/4021279
You will need to fix ... dependencies ... [and] rebuild your application...
Microsoft Security Advisory 4022345 - Identifying and correcting failure of Windows Update client to receive updates http://technet.microsoft.com/library/security/4022345
... no plan to release an automatic update for Client OS [==Win10] versions. ...
[Suggested Actions] Log into each machine
Microsoft Security Advisory 4022344 - Security Update for Microsoft Malware Protection Engine http://technet.microsoft.com/library/security/4022344
Out-of-band release: ... remote code execution if [scanning] a specially crafted file.
Release Notes April 2017, known issues ( 4015549 4015546 4015550 4015547 ): [On AMD Carrizo,] installing this update will block downloading and installing future Windows updates. Microsoft is working on a resolution and will provide an update in an upcoming release..
How will that upcoming update ever get installed?
Critical Microsoft Word Zero-Day is Being Actively Exploited ... [since January 2017] http://www.sans.org/newsletters/newsbites/xix/29#305
- CVE-2017-0199 PoC http://seclists.org/fulldisclosure/2017/Apr/70
  CVE-2017-0199 Practical exploitation ! (PoC) http://rewtin.blogspot.com.au/2017/04/cve-2017-0199-practical-exploitation-poc.html
- Hackers exploited Word flaw for months while Microsoft investigated http://www.reuters.com/article/us-microsoft-cyber-idUSKBN17S32G
MS17-023 - Critical - Security Update for Adobe Flash Player (4014329) http://technet.microsoft.com/library/security/ms17-023
MS17-022 - Important - Security Update for Microsoft XML Core Services (4010321) http://technet.microsoft.com/library/security/ms17-022
MS17-021 - Important - Security Update for Windows DirectShow (4010318) http://technet.microsoft.com/library/security/ms17-021
MS17-020 - Important - Security Update for Windows DVD Maker (3208223) http://technet.microsoft.com/library/security/ms17-020
- CVE-2017-0045 Windows DVD Maker XML External Entity File Disclosure http://www.securityfocus.com/archive/1/540284
MS17-018 - Important - Security Update for Windows Kernel-Mode Drivers (4013083) http://technet.microsoft.com/library/security/ms17-018
MS17-017 - Important - Security Update for Windows Kernel (4013081) http://technet.microsoft.com/library/security/ms17-017
MS17-014 - Important - Security Update for Microsoft Office (4013241) http://technet.microsoft.com/library/security/ms17-014
MS17-013 - Critical - Security Update for Microsoft Graphics Component (4013075) http://technet.microsoft.com/library/security/ms17-013
- Detecting and mitigating elevation-of-privilege exploit for CVE-2017-0005 https://blogs.technet.microsoft.com/mmpc/2017/03/27/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005/
MS17-012 - Important - Security Update for Microsoft Windows (4013078) http://technet.microsoft.com/library/security/ms17-012
MS17-011 - Important - Security Update for Microsoft Uniscribe (4013076) http://technet.microsoft.com/library/security/ms17-011
MS17-010 - Critical - Security Update for Microsoft Windows SMB Server (4013389) http://technet.microsoft.com/library/security/ms17-010
- DoublePulsar Initial SMB Backdoor Ring 0 Shellcode Analysis https://zerosum0x0.blogspot.com.au/2017/04/doublepulsar-initial-smb-backdoor-ring.html
MS17-009 - Critical - Security Update for Microsoft Windows PDF Library (4010319) http://technet.microsoft.com/library/security/ms17-009
MS17-008 - Critical - Security Update for Windows Hyper-V (4013082) http://technet.microsoft.com/library/security/ms17-008
MS17-007 - Critical - Cumulative Security Update for Microsoft Edge (4013071) http://technet.microsoft.com/library/security/ms17-007
- Microsoft Edge Fetch API allows setting of arbitrary request headers http://seclists.org/fulldisclosure/2017/Mar/37
MS17-006 - Critical - Cumulative Security Update for Internet Explorer (4013073) http://technet.microsoft.com/library/security/ms17-006
MS17-005 - Critical - Security Update for Adobe Flash Player (4010250) http://technet.microsoft.com/library/security/ms17-005
Microsoft Security Advisory 4010983 - Vulnerability in ASP.NET Core MVC 1.1.0 Could Allow Denial of Service http://technet.microsoft.com/library/security/4010983
Microsoft Security Advisory 3214296 - Vulnerabilities in Identity Model Extensions Token Signing Verification Could Allow Elevation of Privilege http://technet.microsoft.com/library/security/3214296
MS17-004 - Important - Security Update for Local Security Authority Subsystem Service (3216771) http://technet.microsoft.com/library/security/ms17-004
MS17-003 - Critical - Security Update for Adobe Flash Player (3214628) http://technet.microsoft.com/library/security/ms17-003
MS17-002 - Critical - Security Update for Microsoft Office (3214291) http://technet.microsoft.com/library/security/ms17-002
MS17-001 - Important - Security Update for Microsoft Edge (3199709) http://technet.microsoft.com/library/security/ms17-001
MS16-155 - Important - Security Update for .NET Framework (3205640) http://technet.microsoft.com/library/security/ms16-155
MS16-154 - Critical - Security Update for Adobe Flash Player (3209498) http://technet.microsoft.com/library/security/ms16-154
MS16-153 - Important - Security Update for Common Log File System Driver (3207328) http://technet.microsoft.com/library/security/ms16-153
MS16-152 - Important - Security Update for Windows Kernel (3199709) http://technet.microsoft.com/library/security/ms16-152
MS16-151 - Important - Security Update for Kernel-Mode Driver (3205651) http://technet.microsoft.com/library/security/ms16-151
MS16-150 - Important - Security Update for Windows Secure Kernel Mode (3205642) http://technet.microsoft.com/library/security/ms16-150
MS16-149 - Important - Security Update for Windows (3205655) http://technet.microsoft.com/library/security/ms16-149
MS16-148 - Critical - Security Update for Microsoft Office (3204068) http://technet.microsoft.com/library/security/ms16-148
MS16-147 - Critical - Security Update for Microsoft Uniscribe (3204063) http://technet.microsoft.com/library/security/ms16-147
MS16-146 - Critical - Security Update for Microsoft Graphics Component (3204066) http://technet.microsoft.com/library/security/ms16-146
MS16-145 - Critical - Cumulative Security Update for Microsoft Edge (3204062) http://technet.microsoft.com/library/security/ms16-145
MS16-144 - Critical - Cumulative Security Update for Internet Explorer (3204059) http://technet.microsoft.com/library/security/ms16-144
MS16-142 - Critical - Cumulative Security Update for Internet Explorer (3198467) http://technet.microsoft.com/library/security/ms16-142
MS16-141 - Critical - Security Update for Adobe Flash Player (3202790) http://technet.microsoft.com/library/security/ms16-141
MS16-140 - Important - Security Update for Boot Manager (3193479) http://technet.microsoft.com/library/security/ms16-140
MS16-139 - Important - Security Update for Windows Kernel (3199720) http://technet.microsoft.com/library/security/ms16-139
MS16-138 - Important - Security Update to Microsoft Virtual Hard Drive (3199647) http://technet.microsoft.com/library/security/ms16-138
MS16-137 - Important - Security Update for Windows Authentication Methods (3199173) http://technet.microsoft.com/library/security/ms16-137
MS16-135 - Important - Security Update for Windows Kernel-Mode Drivers (3199135) http://technet.microsoft.com/library/security/ms16-135
MS16-134 - Important - Security Update for Common Log File System Driver (3193706) http://technet.microsoft.com/library/security/ms16-134
MS16-133 - Important - Security Update for Microsoft Office (3199168) http://technet.microsoft.com/library/security/ms16-133
MS16-132 - Critical - Security Update for Microsoft Graphics Component (3199120) http://technet.microsoft.com/library/security/ms16-132
MS16-131 - Critical - Security Update for Microsoft Video Control (3199151) http://technet.microsoft.com/library/security/ms16-131
MS16-130 - Critical - Security Update for Microsoft Windows (3199172) http://technet.microsoft.com/library/security/ms16-130
MS16-129 - Critical - Cumulative Security Update for Microsoft Edge (3199057) http://technet.microsoft.com/library/security/ms16-129
MS16-128 - Critical - Security Update for Adobe Flash Player (3201860) http://technet.microsoft.com/library/security/ms16-128
MS16-127 - Critical - Security Update for Adobe Flash Player (3194343) http://technet.microsoft.com/library/security/ms16-127
MS16-126 - Moderate - Security Update for Microsoft Internet Messaging API (3196067) http://technet.microsoft.com/library/security/ms16-126
MS16-125 - Important - Security Update for Diagnostics Hub (3193229) http://technet.microsoft.com/library/security/ms16-125
MS16-124 - Important - Security Update for Windows Registry (3193227) http://technet.microsoft.com/library/security/ms16-124
MS16-123 - Important - Security Update for Windows Kernel-Mode Drivers (3192892) http://technet.microsoft.com/library/security/ms16-123
MS16-122 - Critical - Security Update for Microsoft Video Control (3195360) http://technet.microsoft.com/library/security/ms16-122
MS16-121 - Important - Security Update for Microsoft Office (3194063) http://technet.microsoft.com/library/security/ms16-121
MS16-120 - Critical - Security Update for Microsoft Graphics Component (3192884) http://technet.microsoft.com/library/security/ms16-120
MS16-119 - Critical - Cumulative Security Update for Microsoft Edge (3192890) http://technet.microsoft.com/library/security/ms16-119
MS16-118 - Critical - Cumulative Security Update for Internet Explorer (3192887) http://technet.microsoft.com/library/security/ms16-118
MS16-117 - Critical - Security Update for Adobe Flash Player (3188128) http://technet.microsoft.com/library/security/ms16-117
Microsoft Security Advisory 3174644 - Updated Support for Diffie-Hellman Key Exchange https://technet.microsoft.com/library/security/3174644
Microsoft Security Advisory 3181759 - Vulnerabilities in ASP.NET Core View Components Could Allow Elevation of Privilege https://technet.microsoft.com/library/security/3181759
MS16-116 - Critical - Security Update in OLE Automation for VBScript Scripting Engine (3188724) http://technet.microsoft.com/library/security/ms16-116
MS16-115 - Important - Security Update for Microsoft Windows PDF Library (3188733) http://technet.microsoft.com/library/security/ms16-115
MS16-114 - Important - Security Update for Windows SMBv1 Server (3185879) http://technet.microsoft.com/library/security/ms16-114
MS16-113 - Important - Security Update for Windows Secure Kernel Mode (3185876) http://technet.microsoft.com/library/security/ms16-113
MS16-112 - Important - Security Update for Windows Lock Screen (3178469) http://technet.microsoft.com/library/security/ms16-112
MS16-111 - Important - Security Update for Windows Kernel (3186973) http://technet.microsoft.com/library/security/ms16-111
MS16-110 - Important - Security Update for Microsoft Windows (3178467) http://technet.microsoft.com/library/security/ms16-110
MS16-109 - Important - Security Update for Silverlight (3182373) http://technet.microsoft.com/library/security/ms16-109
MS16-107 - Critical - Security Update for Microsoft Office (3185852) http://technet.microsoft.com/library/security/ms16-107
MS16-106 - Critical - Security Update for Microsoft Graphics Component (3185848) http://technet.microsoft.com/library/security/ms16-106
MS16-105 - Critical - Cumulative Security Update for Microsoft Edge (3183043) http://technet.microsoft.com/library/security/ms16-105
- WININET CHttpHeaderParser::ParseStatusLine out-of-bounds read details http://seclists.org/fulldisclosure/2016/Nov/51 http://seclists.org/fulldisclosure/2016/Nov/52
- CVE-2016-3247 Microsoft Edge CTextExtractor::GetBlockText OOB read details http://seclists.org/fulldisclosure/2016/Nov/111
MS16-104 - Critical - Cumulative Security Update for Internet Explorer (3183038) http://technet.microsoft.com/library/security/ms16-104
- Microsoft Patches Zero Day Flaw Used In Two Massive Malvertising Campaigns http://www.darkreading.com/attacks-breaches/microsoft-patches-zero-day-flaw-used-in-two-massive-malvertising-campaigns/d/d-id/1326908?
- Microsoft Patches CVE-2016-3351 Zero-Day, Exploited By AdGholas and GooNky Malvertising Groups https://www.proofpoint.com/us/threat-insight/post/Microsoft-Patches-Zero-Day-Exploited-By-AdGholas-GooNky-Malvertising
- MSIE 9-11 MSHTML PROPERTYDESC::HandleStyleComponentProperty OOB read details http://seclists.org/fulldisclosure/2016/Nov/50
  WININET CHttpHeaderParser::ParseStatusLine out-of-bounds read details http://seclists.org/fulldisclosure/2016/Nov/51 http://seclists.org/fulldisclosure/2016/Nov/52
Microsoft Security Advisory 3179528 - Update for Kernel Mode Blacklist http://technet.microsoft.com/library/security/3179528
MS16-103 - Important - Security Update for ActiveSyncProvider (3182332) http://technet.microsoft.com/library/security/ms16-103
MS16-102 - Critical - Security Update for Microsoft Windows PDF Library (3182248) http://technet.microsoft.com/library/security/ms16-102
MS16-101 - Important - Security Update for Windows Authentication Methods (3178465) http://technet.microsoft.com/library/security/ms16-101
MS16-100 - Important - Security Update for Secure Boot (3179577) http://technet.microsoft.com/library/security/ms16-100
MS16-099 - Critical - Security Update for Microsoft Office (3177451) http://technet.microsoft.com/library/security/ms16-099
- Note in KB3177451:
  Nonsecurity-related fixes ... Administrator can use the Group Policy to block running any macro ... See the following articles for more information:
  New feature in Office 2016 can block macros and help prevent infection
  Plan security settings for VBA macros in Office 2016
MS16-098 - Important - Security Update for Windows Kernel-Mode Drivers (3178466) http://technet.microsoft.com/library/security/ms16-098
MS16-097 - Critical - Security Update for Microsoft Graphics Component (3177393) http://technet.microsoft.com/library/security/ms16-097
MS16-096 - Critical - Cumulative Security Update for Microsoft Edge (3177358) http://technet.microsoft.com/library/security/ms16-096
MS16-095 - Critical - Cumulative Security Update for Internet Explorer (3177356) http://technet.microsoft.com/library/security/ms16-095
- Internet Explorer iframe sandbox local file name disclosure vulnerability http://seclists.org/fulldisclosure/2016/Aug/44
MS16-094 - Important - Security Update for Secure Boot (3177404) http://technet.microsoft.com/library/security/ms16-094
MS16-093 - Critical - Security Update for Adobe Flash Player (3174060) http://technet.microsoft.com/library/security/ms16-093
MS16-092 - Important - Security Update for Windows Kernel (3171910) http://technet.microsoft.com/library/security/ms16-092
MS16-091 - Important - Security Update for .NET Framework (3170048) http://technet.microsoft.com/library/security/ms16-091
MS16-090 - Important - Security Update for Windows Kernel-Mode Drivers (3171481) http://technet.microsoft.com/library/security/ms16-090
MS16-089 - Important - Security Update for Windows Secure Kernel Mode (3170050) http://technet.microsoft.com/library/security/ms16-089
MS16-088 - Important - Security Update for Microsoft Office (3170008) http://technet.microsoft.com/library/security/ms16-088
MS16-087 - Critical - Security Update for Windows Print Spooler Components (3170005) http://technet.microsoft.com/library/security/ms16-087
MS16-086 - Critical - Cumulative Security Update for JScript and VBScript (3169996) http://technet.microsoft.com/library/security/ms16-086
MS16-085 - Critical - Cumulative Security Update for Microsoft Edge (3169999) http://technet.microsoft.com/library/security/ms16-085
MS16-084 - Critical - Cumulative Security Update for Internet Explorer (3169991) http://technet.microsoft.com/library/security/ms16-084
MS16-083 - Critical - Security Update for Adobe Flash Player (3167685) http://technet.microsoft.com/library/security/ms16-083
MS16-082 - Important - Security Update for Microsoft Windows Search Component (3165270) http://technet.microsoft.com/library/security/ms16-082
MS16-081 - Important - Security Update for Active Directory (3160352) http://technet.microsoft.com/library/security/ms16-081
MS16-080 - Important - Security Update for Microsoft Windows PDF (3164302) http://technet.microsoft.com/library/security/ms16-080
MS16-079 - Important - Security Update for Microsoft Exchange Server (3160339) http://technet.microsoft.com/library/security/ms16-079
MS16-078 - Important - Security Update for Windows Diagnostic Hub (3165479) http://technet.microsoft.com/library/security/ms16-078
MS16-077 - Important - Security Update for WPAD (3165191) http://technet.microsoft.com/library/security/ms16-077
MS16-076 - Important - Security Update for Netlogon (3167691) http://technet.microsoft.com/library/security/ms16-076
MS16-075 - Important - Security Update for Windows SMB Server (3164038) http://technet.microsoft.com/library/security/ms16-075
MS16-074 - Important - Security Update for Microsoft Graphics Component (3164036) http://technet.microsoft.com/library/security/ms16-074
MS16-073 - Important - Security Update for Windows Kernel-Mode Drivers (3164028) http://technet.microsoft.com/library/security/ms16-073
MS16-072 - Important - Security Update for Group Policy (3163622) http://technet.microsoft.com/library/security/ms16-072
MS16-071 - Critical - Security Update for Microsoft Windows DNS Server (3164065) http://technet.microsoft.com/library/security/ms16-071
MS16-070 - Important - Security Update for Microsoft Office (3163610) http://technet.microsoft.com/library/security/ms16-070
- Microsoft Visio multiple DLL side loading vulnerabilities http://seclists.org/fulldisclosure/2016/Jun/32
MS16-069 - Critical - Cumulative Security Update for JScript and VBScript (3163640) http://technet.microsoft.com/library/security/ms16-069
MS16-068 - Critical - Cumulative Security Update for Microsoft Edge (3163656) http://technet.microsoft.com/library/security/ms16-068
- CVE-2016-3222: MS Edge CBaseScriptable::PrivateQueryInterface memory corruption http://seclists.org/fulldisclosure/2016/Dec/16
MS16-063 - Critical - Cumulative Security Update for Internet Explorer (3163649) http://technet.microsoft.com/library/security/ms16-063
- CVE-2016-0199 / MS16-063: MSIE 11 garbage collector attribute type confusion http://seclists.org/fulldisclosure/2016/Jun/44
Microsoft Security Advisory 3155527 - Update to Cipher Suites for FalseStart http://technet.microsoft.com/library/security/3155527
MS16-067 - Important - Security Update for Volume Manager Driver (3155784) http://technet.microsoft.com/library/security/ms16-067
MS16-066 - Important - Security Update for Virtual Secure Mode (3155451) http://technet.microsoft.com/library/security/ms16-066
MS16-065 - Important - Security Update for .NET Framework (3156757) http://technet.microsoft.com/library/security/ms16-065
MS16-064 - Critical - Security Update for Adobe Flash Player (3157993) http://technet.microsoft.com/library/security/ms16-064
Released 2 days before(?) Adobe's APSB16-15.
Updated 13 May 16, one day after Adobe's patches, to include them all.
MS16-062 - Important - Security Update for Windows Kernel-Mode Drivers (3158222) http://technet.microsoft.com/library/security/ms16-062
MS16-061 - Important - Security Update for Microsoft RPC (3155520) http://technet.microsoft.com/library/security/ms16-061
MS16-060 - Important - Security Update for Windows Kernel (3154846) http://technet.microsoft.com/library/security/ms16-060
MS16-059 - Important - Security Update for Windows Media Center (3150220) http://technet.microsoft.com/library/security/ms16-059
MS16-058 - Important - Security Update for Windows IIS (3141083) http://technet.microsoft.com/library/security/ms16-058
MS16-057 - Critical - Security Update for Windows Shell (3156987) http://technet.microsoft.com/library/security/ms16-057
MS16-056 - Critical - Security Update for Windows Journal (3156761) http://technet.microsoft.com/library/security/ms16-056
MS16-055 - Critical - Security Update for Microsoft Graphics Component (3156754) http://technet.microsoft.com/library/security/ms16-055
MS16-054 - Critical - Security Update for Microsoft Office (3155544) http://technet.microsoft.com/library/security/ms16-054
MS16-053 - Critical - Security Update for JScript and VBScript (3156764) http://technet.microsoft.com/library/security/ms16-053
MS16-052 - Critical - Cumulative Security Update for Microsoft Edge (3155538) http://technet.microsoft.com/library/security/ms16-052
MS16-051 - Critical - Cumulative Security Update for Internet Explorer (3155533) http://technet.microsoft.com/library/security/ms16-051
Microsoft Security Advisory 3152550 - Update to Improve Wireless Mouse Input Filtering http://technet.microsoft.com/library/security/3152550
MS16-050 - Critical - Security Update for Adobe Flash Player (3154132) http://technet.microsoft.com/library/security/ms16-050
Released 5 days after Adobe's APSB16-10 that was forewarned as rated critical and being actively exploited.
MS16-049 - Important - Security Update for HTTP.sys (3148795) http://technet.microsoft.com/library/security/ms16-049
MS16-048 - Important - Security Update for CSRSS (3148528) http://technet.microsoft.com/library/security/ms16-048
MS16-047 - Important - Security Update for SAM and LSAD Remote Protocols (3148527) http://technet.microsoft.com/library/security/ms16-047
MS16-046 - Important - Security Update for Secondary Logon (3148538) http://technet.microsoft.com/library/security/ms16-046
MS16-045 - Important - Security Update for Windows Hyper-V (3143118) http://technet.microsoft.com/library/security/ms16-045
MS16-044 - Important - Security Update for Windows OLE (3146706) http://technet.microsoft.com/library/security/ms16-044
MS16-042 - Critical - Security Update for Microsoft Office (3148775) http://technet.microsoft.com/library/security/ms16-042
MS16-041 - Important - Security Update for .NET Framework (3148789) http://technet.microsoft.com/library/security/ms16-041
MS16-040 - Critical - Security Update for Microsoft XML Core Services (3148541) http://technet.microsoft.com/library/security/ms16-040
MS16-039 - Critical - Security Update for Microsoft Graphics Component (3148522) http://technet.microsoft.com/library/security/ms16-039
MS16-038 - Critical - Cumulative Security Update for Microsoft Edge (3148532) http://technet.microsoft.com/library/security/ms16-038
MS16-037 - Critical - Cumulative Security Update for Internet Explorer (3148531) http://technet.microsoft.com/library/security/ms16-037
- Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting Vulnerability http://www.securityfocus.com/archive/1/538098
MS16-036 - Critical - Security Update for Adobe Flash Player (3144756) http://technet.microsoft.com/library/security/ms16-036
MS16-035 - Important - Security Update for .NET Framework to Address Security Feature Bypass (3141780) http://technet.microsoft.com/library/security/ms16-035
- After you apply security update 3141780, .NET Framework applications encounter exception errors or unexpected failures while processing files that contain SignedXml http://support.microsoft.com/kb/3148821
MS16-034 - Important - Security Update for Windows Kernel-Mode Drivers to Address Elevation of Privilege (3143145) http://technet.microsoft.com/library/security/ms16-034
MS16-033 - Important - Security Update for Windows USB Mass Storage Class Driver to Address Elevation of Privilege (3143142) http://technet.microsoft.com/library/security/ms16-033
MS16-032 - Important - Security Update for Secondary Logon to Address Elevation of Privile (3143141) http://technet.microsoft.com/library/security/ms16-032
MS16-031 - Important - Security Update for Microsoft Windows to Address Elevation of Privilege (3140410) http://technet.microsoft.com/library/security/ms16-031
MS16-030 - Important - Security Update for Windows OLE to Address Remote Code Execution (3143136) http://technet.microsoft.com/library/security/ms16-030
MS16-029 - Important - Security Update for Microsoft Office to Address Remote Code Execution (3141806) http://technet.microsoft.com/library/security/ms16-029
MS16-028 - Critical - Security Update for Microsoft Windows PDF Library to Address Remote Code Execution (3143081) http://technet.microsoft.com/library/security/ms16-028
MS16-027 - Critical - Security Update for Windows Media to Address Remote Code Execution (3143146) http://technet.microsoft.com/library/security/ms16-027
MS16-026 - Critical - Security Update for Graphic Fonts to Address Remote Code Execution (3143148) http://technet.microsoft.com/library/security/ms16-026
MS16-025 - Important - Security Update for Windows Library Loading to Address Remote Code Execution (3140709) http://technet.microsoft.com/library/security/ms16-025
- Windows Mail Find People DLL side loading vulnerability http://seclists.org/fulldisclosure/2016/Mar/16
MS16-024 - Critical - Cumulative Security Update for Microsoft Edge (3142019) http://technet.microsoft.com/library/security/ms16-024
MS16-023 - Critical - Cumulative Security Update for Internet Explorer (3142015) http://technet.microsoft.com/library/security/ms16-023
Microsoft Security Advisory 3137909 - Vulnerabilities in ASP.NET Templates Could Allow Tampering http://technet.microsoft.com/library/security/3137909
MS16-022 - Critical - Security Update for Adobe Flash Player (3135782) http://technet.microsoft.com/library/security/ms16-022
Updated 12 Feb 16.
See also (used to be) Microsoft Security Advisory 2755801
MS16-019 - Important - Security Update for .NET Framework to Address Denial of Service (3137893) http://technet.microsoft.com/library/security/ms16-019
MS16-018 - Important - Security Update for Windows Kernel-Mode Drivers to Address Elevation of Privilege (3136082) http://technet.microsoft.com/library/security/ms16-018
MS16-017 - Important - Security Update for Remote Desktop Display Driver to Address Elevation of Privilege (3134700) http://technet.microsoft.com/library/security/ms16-017
MS16-016 - Important - Security Update for WebDAV to Address Elevation of Privilege (3136041) http://technet.microsoft.com/library/security/ms16-016
MS16-015 - Critical - Security Update for Microsoft Office to Address Remote Code Execution (3134226) http://technet.microsoft.com/library/security/ms16-015
- KB3114717 Causes High CPU and Breaks Office 2013 Applications http://windowsitpro.com/patch-tuesday/kb3114717-causes-high-cpu-and-breaks-office-2013-applications
MS16-014 - Important - Security Update for Microsoft Windows to Address Remote Code Execution (3134228) http://technet.microsoft.com/library/security/ms16-014
Updated 10 Feb 16.
See KB3126593: ... behavior of searching for DLLs ... in certain scenarios ... will be changed ... the current directory will be skipped ....
Which scenarios? Will this finally prevent the DLL hijack issues? (NO: see the later MS16-025, MS16-037...)
- NPS Datastore server DLL side loading vulnerability http://seclists.org/fulldisclosure/2016/Feb/49
  BDA MPEG2 Transport Information Filter DLL side loading vulnerability http://seclists.org/fulldisclosure/2016/Feb/50
  MapsUpdateTask Task DLL side loading vulnerability http://seclists.org/fulldisclosure/2016/Feb/51
  Re: OLE DB Provider for Oracle multiple DLL side loading vulnerabilities http://seclists.org/fulldisclosure/2016/Feb/52
MS16-013 - Critical - Security Update for Windows Journal to Address Remote Code Execution (3134811) http://technet.microsoft.com/library/security/ms16-013
MS16-012 - Critical - Security Update for Microsoft Windows PDF Library to Address Remote Code Execution (3138938) http://technet.microsoft.com/library/security/ms16-012
MS16-011 - Critical - Cumulative Security Update for Microsoft Edge (3134225) http://technet.microsoft.com/library/security/ms16-011
MS16-009 - Critical - Cumulative Security Update for Internet Explorer (3134220) http://technet.microsoft.com/library/security/ms16-009
- Analysis of CVE-2016-0059 - Microsoft IE Information Disclosure Vulnerability Discovered by Fortinet http://blog.fortinet.com/post/analysis-of-cve-2016-0059-microsoft-ie-information-disclosure-vulnerability-discovered-by-fortinet
- CVE-2016-0063: MSIE 8-11 MSHTML DOMImplementation type confusion details http://seclists.org/fulldisclosure/2016/Nov/157
Enhanced Mitigation Experience Toolkit (EMET) version 5.5 is now available http://blogs.technet.com/b/srd/archive/2016/02/02/enhanced-mitigation-experience-toolkit-emet-version-5-5-is-now-available.aspx
With Windows 10 compatibility.
- Using EMET to Disable EMET https://www.fireeye.com/blog/threat-research/2016/02/using_emet_to_disabl.html
Microsoft Security Advisory 3123479 - Deprecation of SHA-1 Hashing Algorithm for Microsoft Root Certificate Program http://technet.microsoft.com/library/security/3123479
Updates for ActiveX Kill Bits 3118753 http://technet.microsoft.com/library/security/3118753
Microsoft Security Advisory 3109853 - Update to Improve TLS Session Resumption Interoperability http://technet.microsoft.com/library/security/3109853
MS16-008 - Important - Security Update for Windows Kernel to Address Elevation of Privilege (3124605) http://technet.microsoft.com/library/security/ms16-008
MS16-007 - Important - Security Update for Microsoft Windows to Address Remote Code Execution (3124901) http://technet.microsoft.com/library/security/ms16-007
MS16-006 - Critical - Security Update for Silverlight to Address Remote Code Execution (3126036) http://technet.microsoft.com/library/security/ms16-006
MS16-005 - Critical - Security Update for Windows Kernel-Mode Drivers to Address Remote Code Execution (3124584) http://technet.microsoft.com/library/security/ms16-005
MS16-004 - Critical - Security Update for Microsoft Office to Address Remote Code Execution (3124585) http://technet.microsoft.com/library/security/ms16-004
MS16-003 - Critical - Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3125540) http://technet.microsoft.com/library/security/ms16-003
MS16-002 - Critical - Cumulative Security Update for Microsoft Edge (3124904) http://technet.microsoft.com/library/security/ms16-002
MS16-001 - Critical - Cumulative Security Update for Internet Explorer (3124903) http://technet.microsoft.com/library/security/ms16-001
Microsoft Security Advisory 3123040 - Inadvertently Disclosed Digital Certificate Could Allow Spoofing http://technet.microsoft.com/library/security/3123040
MS15-135 - Important - Security Update for Windows Kernel-Mode Drivers to Address Elevation of Privilege (3119075) http://technet.microsoft.com/library/security/ms15-135
MS15-134 - Important - Security Update for Windows Media Center to Address Remote Code Execution (3108669) http://technet.microsoft.com/library/security/ms15-134
- [CORE-2015-0014] - Microsoft Windows Media Center link file incorrectly resolved reference http://seclists.org/fulldisclosure/2015/Dec/6
MS15-133 - Important - Security Update for Windows PGM to Address Elevation of Privilege (3116130) http://technet.microsoft.com/library/security/ms15-133
MS15-132 - Important - Security Update for Microsoft Windows to Address Remote Code Execution (3116162) http://technet.microsoft.com/library/security/ms15-132
- COM+ Services DLL side loading vulnerability http://seclists.org/fulldisclosure/2015/Dec/51
  Event Viewer Snapin multiple DLL side loading vulnerabilities http://seclists.org/fulldisclosure/2015/Dec/52
  Windows Authentication UI DLL side loading vulnerability http://seclists.org/fulldisclosure/2015/Dec/53
- Shutdown UX DLL side loading vulnerability http://seclists.org/fulldisclosure/2015/Dec/62
- Remote Exploitation of Microsoft Office DLL Hijacking (MS15-132) via Browsers http://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/january/remote-exploitation-of-microsoft-office-dll-hijacking-ms15-132-via-browsers/
MS15-131 - Critical - Security Update for Microsoft Office to Address Remote Code Execution (3116111) http://technet.microsoft.com/library/security/ms15-131
- December 2015 Microsoft Patch Tuesday http://isc.sans.edu/forums/diary/20461
  KB3114409 ... causing Outlook to launch in Safe Mode ...
  Replacement KB3114560 released 16 Dec 15.
- #BadWinmail: The "Enterprise Killer" Attack Vector in Microsoft Outlook http://seclists.org/fulldisclosure/2015/Dec/68 https://sites.google.com/site/zerodayresearch/BadWinmail.pdf
MS15-130 - Critical - Security Update for Microsoft Uniscribe to Address Remote Code Execution (3108670) http://technet.microsoft.com/library/security/ms15-130
- Vulnerability in Microsoft's Unicode Scripts Processor allows execution of arbitrary code http://blogs.flexerasoftware.com/vulnerability-management/2015/12/vulnerability-in-microsofts-unicode-scripts-processor-allows-execution-of-arbitrary-code.html
MS15-129 - Critical - Security Update for Silverlight to Address Remote Code Execution (3106614) http://technet.microsoft.com/library/security/ms15-129
MS15-128 - Critical - Security Update for Microsoft Graphics Component to Address Remote Code Execution (3104503) http://technet.microsoft.com/library/security/ms15-128
MS15-126 - Critical - Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3116178) http://technet.microsoft.com/library/security/ms15-126
MS15-125 - Critical - Cumulative Security Update for Microsoft Edge (3116184) http://technet.microsoft.com/library/security/ms15-125
MS15-124 - Critical - Cumulative Security Update for Internet Explorer (3116180) http://technet.microsoft.com/library/security/ms15-124
- BFS-SA-2015-003: Internet Explorer CObjectElement Use-After-Free Vulnerability http://www.securityfocus.com/archive/1/537088
Microsoft Security Advisory 3119884 - Inadvertently Disclosed Digital Certificates Could Allow Spoofing http://technet.microsoft.com/library/security/3119884
Microsoft Security Advisory 3108638 - Update for Windows Hyper-V to Address CPU Weakness http://technet.microsoft.com/library/security/3108638
MS15-123 - Important - Security Update for Skype for Business and Microsoft Lync to Address Information Disclosure (3105872) http://technet.microsoft.com/library/security/ms15-123
MS15-122 - Important - Security Update for Kerberos to Address Security Feature Bypass (3105256) http://technet.microsoft.com/library/security/ms15-122
MS15-121 - Important - Security Update for Schannel to Address Spoofing (3081320) http://technet.microsoft.com/library/security/ms15-121
MS15-120 - Important - Security Update for IPSec to Address Denial of Service (3102939) http://technet.microsoft.com/library/security/ms15-120
MS15-119 - Important - Security Update for Winsock to Address Elevation of Privilege (3104521) http://technet.microsoft.com/library/security/ms15-119
MS15-118 - Important - Security Update for .NET Framework to Address Elevation of Privilege (3104507) http://technet.microsoft.com/library/security/ms15-118
MS15-117 - Important - Security Update for NDIS to Address Elevation of Privilege (3101722) http://technet.microsoft.com/library/security/ms15-117
MS15-116 - Important - Security Update for Microsoft Office to Address Remote Code Execution (3104540) http://technet.microsoft.com/library/security/ms15-116
MS15-115 - Critical - Security Update for Microsoft Windows to Address Remote Code Execution (3105864) http://technet.microsoft.com/library/security/ms15-115
Re-released 12 Nov 15.
- Quoting from KB 3097877: ... rereleased ... to resolve the following issues:
  
  ... crashing in Outlook ...
  ... problems while logging on ... the screen went black. There may be other, similar logon issues ...
- November 2015 Microsoft Patch Tuesday http://isc.sans.edu/forums/diary/20359
  Microsoft Patch Tuesday followup: KB3097877 re-issued! http://isc.sans.edu/forums/diary/20367
MS15-114 - Critical - Security Update for Windows Journal to Address Remote Code Execution (3100213) http://technet.microsoft.com/library/security/ms15-114
MS15-113 - Critical - Cumulative Security Update for Microsoft Edge (3104519) http://technet.microsoft.com/library/security/ms15-113
MS15-012 - Critical - Cumulative Security Update for Internet Explorer (3104517) http://technet.microsoft.com/library/security/ms15-012
MS15-111 - Important - Security Update for Windows Kernel to Address Elevation of Privilege (3096447) http://technet.microsoft.com/library/security/ms15-111
- [CVE-2015-2552] Windows 8+ - Trusted Boot Security Feature Bypass Vulnerability http://www.securityfocus.com/archive/1/536678
- Raising the Dead http://googleprojectzero.blogspot.com.au/2016/01/raising-dead.html
MS15-110 - Important - Security Updates for Microsoft Office to Address Remote Code Execution (3096440) http://technet.microsoft.com/library/security/ms15-110
MS15-109 - Critical - Security Update for Windows Shell to Address Remote Code Execution (3096443) http://technet.microsoft.com/library/security/ms15-109
(Vista, server) MS15-108 - Critical - Security Update for JScript and VBScript to Address Remote Code Execution (3089659) http://technet.microsoft.com/library/security/ms15-108
- JScript 5.7 (MSIE 8) RegExpBase::FBadHeader regular expression use-after-free http://seclists.org/fulldisclosure/2015/Oct/54
MS15-107 - Important - Cumulative Security Update for Microsoft Edge (3096448) http://technet.microsoft.com/library/security/ms15-107
MS15-106 - Critical - Cumulative Security Update for Internet Explorer (3096441) http://technet.microsoft.com/library/security/ms15-106
Microsoft Security Advisory 3097966 - Inadvertently Disclosed Digital Certificates Could Allow Spoofing http://technet.microsoft.com/library/security/3097966
Updated 13 Oct 15.
Microsoft Security Advisory 3083992 - Update to Improve AppLocker Publisher Rule Enforcement http://technet.microsoft.com/library/security/3083992
MS15-105 - Important - Vulnerability in Windows Hyper-V Could Allow Security Feature Bypass (3091287) http://technet.microsoft.com/library/security/ms15-105
MS15-102 - Important - Vulnerabilities in Windows Task Management Could Allow Elevation of Privilege (3089657) http://technet.microsoft.com/library/security/ms15-102
MS15-101 - Important - Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3089662) http://technet.microsoft.com/library/security/ms15-101
MS15-100 - Important - Vulnerability in Windows Media Center Could Allow Remote Code Execution (3087918) http://technet.microsoft.com/library/security/ms15-100
MS15-099 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3089664) http://technet.microsoft.com/library/security/ms15-099
MS15-098 - Critical - Vulnerabilities in Windows Journal Could Allow Remote Code Execution (3089669) http://technet.microsoft.com/library/security/ms15-098
MS15-097 - Critical - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3089656) http://technet.microsoft.com/library/security/ms15-097
MS15-095 - Critical - Cumulative Security Update for Microsoft Edge (3089665) http://technet.microsoft.com/library/security/ms15-095
MS15-094 - Critical - Cumulative Security Update for Internet Explorer (3089548) http://technet.microsoft.com/library/security/ms15-094
MS15-093 - Critical - Security Update for Internet Explorer (3088903) http://technet.microsoft.com/library/security/ms15-093
MS15-092 - Important - Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3086251) http://technet.microsoft.com/library/security/ms15-092
MS15-091 - Critical - Cumulative Security Update for Microsoft Edge (3084525) http://technet.microsoft.com/library/security/ms15-091
MS15-090 - Important - Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3060716) http://technet.microsoft.com/library/security/ms15-090
MS15-089 - Important - Vulnerability in WebDAV Could Allow Information Disclosure (3076949) http://technet.microsoft.com/library/security/ms15-089
MS15-088 - Important - Unsafe Command Line Parameter Passing Could Allow Information Disclosure (3082458) http://technet.microsoft.com/library/security/ms15-088
MS15-085 - Important - Vulnerability in Mount Manager Could Allow Elevation of Privilege (3082487) http://technet.microsoft.com/library/security/ms15-085
- Defending against CVE-2015-1769: a logical issue exploited via a malicious USB stick http://blogs.technet.com/b/srd/archive/2015/08/11/defending-against-cve-2015-1769-a-logical-issue-exploited-via-a-malicious-usb-stick.aspx
MS15-084 - Important - Vulnerabilities in XML Core Services Could Allow Information Disclosure (3080129) http://technet.microsoft.com/library/security/ms15-084
MS15-082 - Important - Vulnerabilities in RDP Could Allow Remote Code Execution (3080348) http://technet.microsoft.com/library/security/ms15-082
MS15-081 - Critical - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3080790) http://technet.microsoft.com/library/security/ms15-081
MS15-080 - Critical - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3078662) http://technet.microsoft.com/library/security/ms15-080
MS15-079 - Critical - Cumulative Security Update for Internet Explorer (3082442) http://technet.microsoft.com/library/security/ms15-079
MS15-078 - Critical - Vulnerability in Microsoft Font Driver Could Allow Remote Code Execution (3079904) http://technet.microsoft.com/library/security/ms15-078
Microsoft Security Advisory 2974294 - Vulnerability in Microsoft Malicious Software Removal Tool Could Allow Elevation of privilege http://technet.microsoft.com/library/security/2974294
Microsoft Security Advisory 3074162 - Vulnerability in Microsoft Malicious Software Removal Tool Could Allow Elevation of Privilege http://technet.microsoft.com/library/security/3074162
Microsoft Security Advisory 3057154 - Update to Harden Use of DES Encryption http://technet.microsoft.com/library/security/3057154
Updated 9 Dec 15.
MS15-077 - Important - Vulnerability in ATM Font Driver Could Allow Elevation of Privilege (3077657) http://technet.microsoft.com/library/security/ms15-077
MS15-076 - Important - Vulnerability in Windows Remote Procedure Call Could Allow Elevation of Privilege (3067505) http://technet.microsoft.com/library/security/ms15-076
MS15-075 - Important - Vulnerabilities in OLE Could Allow Elevation of Privilege (3072633) http://technet.microsoft.com/library/security/ms15-075
MS15-074 - Important - Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (3072630) http://technet.microsoft.com/library/security/ms15-074
MS15-073 - Important - Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (3070102) http://technet.microsoft.com/library/security/ms15-073
MS15-072 - Important - Vulnerability in Windows Graphics Component Could Allow Elevation of Privilege (3069392) http://technet.microsoft.com/library/security/ms15-072
MS15-070 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620) http://technet.microsoft.com/library/security/ms15-070
MS15-069 - Important - Vulnerabilities in Windows Could Allow Remote Code Execution (3072631) http://technet.microsoft.com/library/security/ms15-069
MS15-068 - Critical - Vulnerabilities in Windows Hyper-V Could Allow Remote Code Execution (3072000) http://technet.microsoft.com/library/security/ms15-068
MS15-067 - Critical - Vulnerability in RDP Could Allow Remote Code Execution (3073094) http://technet.microsoft.com/library/security/ms15-067
MS15-066 - Critical - Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3072604) http://technet.microsoft.com/library/security/ms15-066
MS15-065 - Critical - Security Update for Internet Explorer (3076321) http://technet.microsoft.com/library/security/ms15-065
MS15-063 - Important - Vulnerability in Windows Kernel Could Allow Elevation of Privilege (3063858) http://technet.microsoft.com/library/security/ms15-063
MS15-061 - Important - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (3057839) http://technet.microsoft.com/library/security/ms15-061
MS15-060 - Important - Vulnerability in Microsoft Common Controls Could Allow Remote Code Execution (3059317) http://technet.microsoft.com/library/security/ms15-060
MS15-059 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3064949) http://technet.microsoft.com/library/security/ms15-059
MS15-057 - Critical - Vulnerability in Windows Media Player Could Allow Remote Code Execution (3033890) http://technet.microsoft.com/library/security/ms15-057
MS15-056 - Critical - Cumulative Security Update for Internet Explorer (3058515) http://technet.microsoft.com/library/security/ms15-056
Microsoft Security Advisory 3042058 - Update to Default Cipher Suite Priority Order http://technet.microsoft.com/library/security/3042058
Updated 13 Oct 15.
MS15-055 - Important - Vulnerability in Schannel Could Allow Information Disclosure (3061518) http://technet.microsoft.com/library/security/ms15-055
MS15-054 - Important - Vulnerability in Microsoft Management Console File Format Could Allow Denial of Service (3051768) http://technet.microsoft.com/library/security/ms15-054
MS15-053 - Important - Vulnerabilities in JScript and VBScript Scripting Engines Could Allow Security Feature Bypass (3057263) http://technet.microsoft.com/library/security/ms15-053
MS15-052 - Important - Vulnerability in Windows Kernel Could Allow Security Feature Bypass (3050514) http://technet.microsoft.com/library/security/ms15-052
MS15-051 - Important - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (3057191) http://technet.microsoft.com/library/security/ms15-051
- Exploring CVE-2015-1701 - A Win32k Elevation of Privilege Vulnerability Used in Targeted Attacks http://blog.trendmicro.com/trendlabs-security-intelligence/exploring-cve-2015-1701-a-win32k-elevation-of-privilege-vulnerability-used-in-targeted-attacks/
MS15-050 - Important - Vulnerability in Service Control Manager Could Allow Elevation of Privilege (3055642) http://technet.microsoft.com/library/security/ms15-050
MS15-049 - Important - Vulnerability in Silverlight Could Allow Elevation of Privilege (3058985) http://technet.microsoft.com/library/security/ms15-049
MS15-048 - Important - Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3057134) http://technet.microsoft.com/library/security/ms15-048
MS15-046 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3057181) http://technet.microsoft.com/library/security/ms15-046
MS15-045 - Critical - Vulnerability in Windows Journal Could Allow Remote Code Execution (3046002) http://technet.microsoft.com/library/security/ms15-045
MS15-044 - Critical - Vulnerabilities in Microsoft Font Drivers Could Allow Remote Code Execution (3057110) http://technet.microsoft.com/library/security/ms15-044
MS15-043 - Critical - Cumulative Security Update for Internet Explorer (3049563) http://technet.microsoft.com/library/security/ms15-043
Microsoft Security Advisory 3045755 - Update to Improve PKU2U Authentication http://technet.microsoft.com/library/security/3045755
MS15-042 - Important - Vulnerability in Windows Hyper-V Could Allow Denial of Service (3047234) http://technet.microsoft.com/library/security/ms15-042
MS15-041 - Important - Vulnerability in .NET Framework Could Allow Information Disclosure (3048010) http://technet.microsoft.com/library/security/ms15-041
MS15-039 - Important - Vulnerability in XML Core Services Could Allow Security Feature Bypass (3046482) http://technet.microsoft.com/library/security/ms15-039
MS15-038 - Important - Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3045685) http://technet.microsoft.com/library/security/ms15-038
MS15-037 - Important - Vulnerability in Windows Task Scheduler Could Allow Elevation of Privilege (3046269) http://technet.microsoft.com/library/security/ms15-037
MS15-035 - Critical - Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (3046306) http://technet.microsoft.com/library/security/ms15-035
MS15-034 - Critical - Vulnerability in HTTP.sys Could Allow Remote Code Execution (3042553) http://technet.microsoft.com/library/security/ms15-034
MS15-033 - Critical - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3048019) http://technet.microsoft.com/library/security/ms15-033
MS15-032 - Critical - Cumulative Security Update for Internet Explorer (3038314) http://technet.microsoft.com/library/security/ms15-032
Microsoft Security Advisory 3050995 - Improperly Issued Digital Certificates Could Allow Spoofing http://technet.microsoft.com/library/security/3050995
Re-released 26 Mar 15.
Microsoft Security Advisory 3046310 - Improperly Issued Digital Certificates Could Allow Spoofing http://technet.microsoft.com/library/security/3046310
Re-released 19 Mar 15.
EMET 5.2 is available http://blogs.technet.com/b/srd/archive/2015/03/12/emet-5-2-is-available.aspx
EMET 5.2 is available (update) http://blogs.technet.com/b/srd/archive/2015/03/16/emet-5-2-is-available.aspx
Changed/updated without changing version number?
- EMET 5.2 Breaks Internet Explorer 11 https://social.technet.microsoft.com/Forums/en-US/e46d951e-d8b1-4357-88d2-23f376bd3160/emet-52-breaks-internet-explorer-11?forum=emet
Microsoft Security Advisory 3033929 - Availability of SHA-2 Code Signing Support for Windows 7 and Windows Server 2008 R2 http://technet.microsoft.com/library/security/3033929
- Problematic Windows 7 Patch http://www.sans.org/newsletters/newsbites/xvii/21#307
MS15-031 - Important - Vulnerability in Schannel Could Allow Security Feature Bypass (3046049) http://technet.microsoft.com/library/security/ms15-031
- Microsoft Security Advisory 3046015 - Vulnerability in Schannel Could Allow Security Feature Bypass http://technet.microsoft.com/library/security/3046015
MS15-030 - Important - Vulnerability in Remote Desktop Protocol Could Allow Denial of Service (3039976) http://technet.microsoft.com/library/security/ms15-030
MS15-029 - Important - Vulnerability in Windows Photo Decoder Component Could Allow Information Disclosure (3035126) http://technet.microsoft.com/library/security/ms15-029
MS15-028 - Important - Vulnerability in Windows Task Scheduler Could Allow Security Feature Bypass (3030377) http://technet.microsoft.com/library/security/ms15-028
MS15-025 - Important - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (3038680) http://technet.microsoft.com/library/security/ms15-025
MS15-024 - Important - Vulnerability in PNG Processing Could Allow Information Disclosure (3035132) http://technet.microsoft.com/library/security/ms15-024
MS15-023 - Important - Vulnerabilities in Kernel-Mode Driver Could Allow Elevation of Privilege (3034344) http://technet.microsoft.com/library/security/ms15-023
MS15-022 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3038999) http://technet.microsoft.com/library/security/ms15-022
MS15-021 - Critical - Vulnerabilities in Adobe Font Driver Could Allow Remote Code Execution (3032323) http://technet.microsoft.com/library/security/ms15-021
MS15-020 - Critical - Vulnerabilities in Microsoft Windows Could Allow Remote Code Execution (3041836) http://technet.microsoft.com/library/security/ms15-020
- CVE-2015-0096 issue patched today involves failed Stuxnet fix http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/CVE-2015-0096-issue-patched-today-involves-failed-Stuxnet-fix/ba-p/6718402
  Full details on CVE-2015-0096 and the failed MS10-046 Stuxnet fix http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Full-details-on-CVE-2015-0096-and-the-failed-MS10-046-Stuxnet/ba-p/6718459
MS15-019 - Critical - Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3040297) http://technet.microsoft.com/library/security/ms15-019
MS15-018 - Critical - Cumulative Security Update for Internet Explorer (3032359) http://technet.microsoft.com/library/security/ms15-018
Microsoft Security Advisory 3004375 - Update for Windows Command Line Auditing http://technet.microsoft.com/library/security/3004375
MS15-016 - Important - Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3029944) http://technet.microsoft.com/library/security/ms15-016
MS15-015 - Important - Vulnerability in Microsoft Windows Could Allow Elevation of Privilege (3031432) http://technet.microsoft.com/library/security/ms15-015
MS15-014 - Important - Vulnerability in Group Policy Could Allow Security Feature Bypass (3004361) http://technet.microsoft.com/library/security/ms15-014
- MS15-011 & MS15-014: Hardening Group Policy http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-ms15-014-hardening-group-policy.aspx
MS15-013 - Important - Vulnerability in Microsoft Office Could Allow Security Feature Bypass (3033857) http://technet.microsoft.com/library/security/ms15-013
MS15-012 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3032328) http://technet.microsoft.com/library/security/ms15-012
MS15-011 - Critical - Vulnerability in Group Policy Could Allow Remote Code Execution (3000483) http://technet.microsoft.com/library/security/ms15-011
... To be protected ... additional configuration is required ...
MS15-010 - Critical - Vulnerabilities in Windows Kernel-Mode Driver Could Allow Remote Code Execution (3036220) http://technet.microsoft.com/library/security/ms15-010
MS15-009 - Critical - Security Update for Internet Explorer (3034682) http://technet.microsoft.com/library/security/ms15-009
MS15-008 - Important - Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (3019215) http://technet.microsoft.com/library/security/ms15-008
MS15-006 - Important - Vulnerability in Windows Error Reporting Could Allow Security Feature Bypass (3004365) http://technet.microsoft.com/library/security/ms15-006
MS15-005 - Important - Vulnerability in Network Location Awareness Service Could Allow Security Feature Bypass (3022777) http://technet.microsoft.com/library/security/ms15-005
MS15-004 - Important - Vulnerability in Windows Components Could Allow Elevation of Privilege (3025421) http://technet.microsoft.com/library/security/ms15-004
MS15-003 - Important - Vulnerability in Windows User Profile Service Could Allow Elevation of Privilege (3021674) http://technet.microsoft.com/library/security/ms15-003
MS15-002 - Critical - Vulnerability in Windows Telnet Service Could Allow Remote Code Execution (3020393) http://technet.microsoft.com/library/security/ms15-002
MS15-001 - Important - Vulnerability in Windows Application Compatibility Cache Could Allow Elevation of Privilege (3023266) http://technet.microsoft.com/library/security/ms15-001
Install KB3024777 to fix an issue with KB3004394 on Windows 7 and Windows Server 2008 R2 http://support.microsoft.com/kb/3024777
- Microsoft Patch Tuesday - December 2014 http://isc.sans.edu/forums/diary/19043
- Microsoft pulls a patch and offers PHANTOM FIX for the mess http://www.theregister.co.uk/2014/12/12/microsoft_pulls_a_patch_and_offers_phantom_fix_for_the_mess/
MS14-085 - Important - Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3013126) http://technet.microsoft.com/library/security/ms14-085
MS14-084 - Critical - Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3016711) http://technet.microsoft.com/library/security/ms14-084
MS14-083 - Important - Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (3017347) http://technet.microsoft.com/library/security/ms14-083
Re-released 10 Feb 15.
MS14-082 - Important - Vulnerability in Microsoft Office Could Allow Remote Code Execution (3017349) http://technet.microsoft.com/library/security/ms14-082
- "Cannot insert object" error in an ActiveX custom Office solution after you install the MS14-082 security update http://support.microsoft.com/kb/3025036
MS14-081 - Critical - Vulnerabilities in Microsoft Word and Microsoft Office Web Apps Could Allow Remote Code Execution (3017301) http://technet.microsoft.com/library/security/ms14-081
MS14-080 - Critical - Cumulative Security Update for Internet Explorer (3008923) http://technet.microsoft.com/library/security/ms14-080
Re-released 13 Jan 15.
Underlying KB article updated 18 Dec 14: Known issues ... reports of Internet Explorer 9 crashing ...
- Some web application modal dialog boxes don't work correctly in Internet Explorer 11 after you install update 3008923 http://support.microsoft.com/kb/3025390
MS14-068 - Critical - Vulnerability in Kerberos Could Allow Elevation of Privilege (3011780) http://technet.microsoft.com/library/security/ms14-068
- Additional information about CVE-2014-6324 http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx
- Microsoft November out-of-cycle patch MS14-068 http://isc.sans.edu/forums/diary/18967
  ... can't load Windows Update on Windows 2003 ... we've found a workaround ....
MS14-079 - Moderate - Vulnerability in Kernel-Mode Driver Could Allow Denial of Service (3002885) http://technet.microsoft.com/library/security/ms14-079
MS14-078 - Moderate - Vulnerability in IME (Japanese) Could Allow Elevation of Privilege (2992719) http://technet.microsoft.com/library/security/ms14-078
MS14-074 - Important - Vulnerability in Remote Desktop Protocol Could Allow Security Feature Bypass (3003743) http://technet.microsoft.com/library/security/ms14-074
MS14-072 - Important - Vulnerability in .NET Framework Could Allow Elevation of Privilege (3005210) http://technet.microsoft.com/library/security/ms14-072
- MS14-072: .NET Remoting Elevation of Privilege Vulnerability http://blogs.technet.com/b/srd/archive/2014/11/11/ms14-072-net-remoting-elevation-of-privilege-vulnerability.aspx
MS14-071 - Important - Vulnerability in Windows Audio Service Could Allow Elevation of Privilege (3005607) http://technet.microsoft.com/library/security/ms14-071
MS14-069 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3009710) http://technet.microsoft.com/library/security/ms14-069
MS14-067 - Critical - Vulnerability in XML Core Services Could Allow Remote Code Execution (2993958) http://technet.microsoft.com/library/security/ms14-067
MS14-066 - Critical - Vulnerability in Schannel Could Allow Remote Code Execution (2992611) http://technet.microsoft.com/library/security/ms14-066
Re-released 9 Dec 14, 18 Nov 14, updated 14 Nov 14 in underlying KB article.
MS14-065 - Critical - Cumulative Security Update for Internet Explorer (3003057) http://technet.microsoft.com/library/security/ms14-065
Re-released 9 Dec 14.
MS14-064 - Critical - Vulnerabilities in Windows OLE Could Allow Remote Code Execution (3011443) http://technet.microsoft.com/library/security/ms14-064
- Microsoft Security Advisory 3010060 - Vulnerability in Microsoft OLE Could Allow Remote Code Execution http://technet.microsoft.com/library/security/3010060
- Microsoft Fixes Critical SChannel & OLE Bugs, But No Patches For XP http://www.darkreading.com/vulnerabilities---threats/microsoft-fixes-critical-19-year-old-schannel-bug-but-no-patch-for-xp/d/d-id/1317423
- IBM X-Force Researcher Finds Significant Vulnerability in Microsoft Windows http://securityintelligence.com/ibm-x-force-researcher-finds-significant-vulnerability-in-microsoft-windows#.VGcD8o-hMc0
EMET 5.1 is available http://blogs.technet.com/b/srd/archive/2014/11/10/emet-5-1-is-available.aspx
... compatibility issues were discovered with the November Internet Explorer security update ...
Microsoft Security Advisory 3009008 - Vulnerability in SSL 3.0 Could Allow Information Disclosure http://technet.microsoft.com/library/security/3009008
Updated 14 Apr 15, 16 Feb 15, 10 Feb 15, 9 Dec 14, 29 Oct 14.
- OpenSSL: SSLv3 POODLE Vulnerability Official Release http://isc.sans.edu/forums/diary/18827
- Security Advisory 3009008 revised http://blogs.technet.com/b/msrc/archive/2014/10/29/security-advisory-3009008-released.aspx
Microsoft Security Advisory 2977292 - Update for Microsoft EAP Implementation that Enables the Use of TLS http://technet.microsoft.com/library/security/2977292
Microsoft Security Advisory 2949927 - Availability of SHA-2 Hashing Algorithm for Windows 7 and Windows Server 2008 R2 http://technet.microsoft.com/library/security/2949927
Updated (removed?) 17 Oct 14.
- Microsoft Pulls a Patch After Reports of "Unexpected Behavior" http://www.sans.org/newsletters/newsbites/xvi/84#303
MS14-063 - Important - Vulnerability in FAT32 Disk Partition Driver Could Allow Elevation of Privilege (2998579) http://technet.microsoft.com/library/security/ms14-063
MS14-061 - Important - Vulnerability in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3000434) http://technet.microsoft.com/library/security/ms14-061
MS14-060 - Important - Vulnerability in Windows OLE Could Allow Remote Code Execution (3000869) http://technet.microsoft.com/library/security/ms14-060
MS14-059 - Important - Vulnerability in ASP.NET MVC Could Allow Security Feature Bypass (2990942) http://technet.microsoft.com/library/security/ms14-059
MS14-058 - Critical - Vulnerabilities in Kernel-Mode Driver Could Allow Remote Code Execution (3000061) http://technet.microsoft.com/library/security/ms14-058
MS14-057 - Critical - Vulnerabilities in .NET Framework Could Allow Remote Code Execution (3000414) http://technet.microsoft.com/library/security/ms14-057
- More Details About CVE-2014-4073 Elevation of Privilege Vulnerability http://blogs.technet.com/b/srd/archive/2014/10/14/more-details-about-cve-2014-4073-elevation-of-privilege-vulnerability.aspx
MS14-056 - Critical - Cumulative Security Update for Internet Explorer (2987107) http://technet.microsoft.com/library/security/ms14-056
- October 2014 updates and a preview of changes to out-of-date ActiveX control blocking http://blogs.msdn.com/b/ie/archive/2014/10/14/october-2014-updates-and-a-preview-of-changes-to-out-of-date-activex-control-blocking.aspx
- Close means close: New adware detection criteria http://blogs.technet.com/b/mmpc/archive/2014/10/16/close-means-close-new-adware-detection-criteria.aspx
- Staying in control of your browser: New detection changes http://blogs.technet.com/b/mmpc/archive/2014/10/17/staying-in-control-of-your-browser-new-detection-changes.aspx
MS14-054 - Important - Vulnerability in Windows Task Scheduler Could Allow Elevation of Privilege (2988948) http://technet.microsoft.com/library/security/ms14-054
MS14-053 - Important - Vulnerability in .NET Framework Could Allow Denial of Service (2990931) http://technet.microsoft.com/library/security/ms14-053
MS14-052 - Critical - Cumulative Security Update for Internet Explorer (2977629) http://technet.microsoft.com/library/security/ms14-052
MS14-051 - Critical - Cumulative Security Update for Internet Explorer (2976627) http://technet.microsoft.com/library/security/ms14-051
Note "known issues" in http://support.microsoft.com/kb/2976627 and particularly in http://support.microsoft.com/kb/2991509
MS14-049 - Important - Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (2962490) http://technet.microsoft.com/library/security/ms14-049
MS14-048 - Important - Vulnerability in OneNote Could Allow Remote Code Execution (2977201) http://technet.microsoft.com/library/security/ms14-048
MS14-047 - Important - Vulnerability in LRPC Could Allow Security Feature Bypass (2978668) http://technet.microsoft.com/library/security/ms14-047
MS14-046 - Important - Vulnerability in .NET Framework Could Allow Security Feature Bypass (2984625) http://technet.microsoft.com/library/security/ms14-046
MS14-045 - Important - Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation of Privilege (2984615) http://technet.microsoft.com/library/security/ms14-045
Re-released 27 Aug 14, with update http://support.microsoft.com/kb/2982791 replaced by http://support.microsoft.com/kb/2993651 (noting that the latter still has "known issues").
- Security Bulletin MS14-045 rereleased http://blogs.technet.com/b/msrc/archive/2014/08/27/security-bulletin-ms14-045-rereleased.aspx
MS14-043 - Critical - Vulnerability in Windows Media Center Could Allow Remote Code Execution (2978742) http://technet.microsoft.com/library/security/ms14-043
Announcing EMET 5.0 http://blogs.technet.com/b/srd/archive/2014/07/31/announcing-emet-v5.aspx
General Availability for Enhanced Mitigation Experience Toolkit (EMET) 5.0 http://blogs.technet.com/b/msrc/archive/2014/07/31/general-availability-for-enhanced-mitigation-experience-toolkit-emet-5-0.aspx
MS14-041 - Important - Vulnerability in DirectShow Could Allow Elevation of Privilege (2975681) http://technet.microsoft.com/library/security/ms14-041
MS14-040 - Important - Vulnerability in Ancillary Function Driver (AFD) Could Allow Elevation of Privilege (2975684) http://technet.microsoft.com/library/security/ms14-040
MS14-039 - Important - Vulnerability in On-Screen Keyboard Could Allow Elevation of Privilege (2975685) http://technet.microsoft.com/library/security/ms14-039
MS14-038 - Critical - Vulnerability in Windows Journal Could Allow Remote Code Execution (2975689) http://technet.microsoft.com/library/security/ms14-038
MS14-037 - Critical - Cumulative Security Update for Internet Explorer (2975687) http://technet.microsoft.com/library/security/ms14-037
Microsoft Security Advisory 2974294 - Vulnerability in Microsoft Malware Protection Engine Could Allow Denial of Service http://technet.microsoft.com/library/security/2974294
MS14-036 - Critical - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (2967487) http://technet.microsoft.com/library/security/ms14-036
Re-released 12 Aug 14.
MS14-035 - Critical - Cumulative Security Update for Internet Explorer (2969262) http://technet.microsoft.com/library/security/ms14-035
MS14-034 - Important - Vulnerability in Microsoft Word Could Allow Remote Code Execution (2969261) http://technet.microsoft.com/library/security/ms14-034
MS14-033 - Important - Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure (2966061) http://technet.microsoft.com/library/security/ms14-033
MS14-031 - Important - Vulnerability in TCP Protocol Could Allow Denial of Service (2962478) http://technet.microsoft.com/library/security/ms14-031
MS14-030 - Important - Vulnerability in Remote Desktop Could Allow Tampering (2969259) http://technet.microsoft.com/library/security/ms14-030
Updated 16 Jul 14.
Microsoft Security Advisory 2960358 - Update for Disabling RC4 in .NET TLS http://technet.microsoft.com/library/security/2960358
Updated 13 Oct 15, 8 Jul 14.
Microsoft Security Advisory 2962824 - Update Rollup of Revoked Non-Compliant UEFI Modules http://technet.microsoft.com/library/security/2962824
Updated 10 Jun 14.
Microsoft Security Advisory 2871997 - Update to Improve Credentials Protection and Management http://technet.microsoft.com/library/security/2871997
Re-released 9 Feb 16, 14 Oct 14, 9 Sep 14, 8 Jul 14.
- An Overview of KB2871997 http://blogs.technet.com/b/srd/archive/2014/06/05/an-overview-of-kb2871997.aspx
MS14-029 - Critical - Security Update for Internet Explorer (2962482) http://technet.microsoft.com/library/security/ms14-029
MS14-028 - Important - Vulnerabilities in iSCSI Could Allow Denial of Service (2962485) http://technet.microsoft.com/library/security/ms14-028
MS14-027 - Important - Vulnerability in Windows Shell Handler Could Allow Elevation of Privilege (2962488) http://technet.microsoft.com/library/security/ms14-027
MS14-026 - Important - Vulnerability in .NET Framework Could Allow Elevation of Privilege (2958732) http://technet.microsoft.com/library/security/ms14-026
MS14-025 - Important - Vulnerability in Group Policy Preferences Could Allow Elevation of Privilege (2962486) http://technet.microsoft.com/library/security/ms14-025
- MS14-025: An Update for Group Policy Preferences http://blogs.technet.com/b/srd/archive/2014/05/13/ms14-025-an-update-for-group-policy-preferences.aspx
MS14-024 - Important - Vulnerability in a Microsoft Common Control Could Allow Security Feature Bypass (2961033) http://technet.microsoft.com/library/security/ms14-024
MS14-023 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2961037) http://technet.microsoft.com/library/security/ms14-023
- Microsoft Security Advisory 2269637 - Insecure Library Loading Could Allow Remote Code Execution http://technet.microsoft.com/library/security/2269637
- Load Library Safely http://blogs.technet.com/b/srd/archive/2014/05/13/load-library-safely.aspx
Microsoft Security Advisory 2962393 - Update for Vulnerability in Juniper Networks Windows In-Box Junos Pulse Client http://technet.microsoft.com/library/security/2962393
Re-released 9 Jun 15.
MS14-021 - Critical - Security Update for Internet Explorer (2965111) http://technet.microsoft.com/library/security/ms14-021
- Microsoft Security Advisory 2963983 - Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/2963983
- Microsoft releases Security Advisory 2963983 http://blogs.technet.com/b/msrc/archive/2014/04/26/microsoft-releases-security-advisory.aspx
- More Details about Security Advisory 2963983 IE 0day http://blogs.technet.com/b/srd/archive/2014/04/26/more-details-about-security-advisory-2963983-ie-0day.aspx
- Protection strategies for the Security Advisory 2963983 IE 0day http://blogs.technet.com/b/srd/archive/2014/04/30/protection-strategies-for-the-security-advisory-2963983-ie-0day.aspx
- Out-of-Band Release to Address Microsoft Security Advisory 2963983 http://blogs.technet.com/b/msrc/archive/2014/05/01/out-of-band-release-to-address-microsoft-security-advisory-2963983.aspx
MS14-020 - Important - Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (2950145) http://technet.microsoft.com/security/bulletin/ms14-020
MS14-019 - Important - Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2922229) http://technet.microsoft.com/security/bulletin/ms14-019
- MS14-019 - Fixing a binary hijacking via .cmd or .bat file http://blogs.technet.com/b/srd/archive/2014/04/08/ms14-019-fixing-a-binary-hijacking-via-cmd-or-bat-file.aspx
MS14-018 - Critical - Cumulative Security Update for Internet Explorer (2950467) http://technet.microsoft.com/security/bulletin/ms14-018
MS14-017 - Critical - Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660) http://technet.microsoft.com/security/bulletin/ms14-017
- Microsoft Security Advisory (2953095) Vulnerability in Microsoft Word Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2953095
- Microsoft Releases Security Advisory 2953095 http://blogs.technet.com/b/msrc/archive/2014/03/24/microsoft-releases-security-advisory-2953095.aspx
- Security Advisory 2953095: recommendation to stay protected and for detections http://blogs.technet.com/b/srd/archive/2014/03/24/security-advisory-2953095-recommendation-to-stay-protected-and-for-detections.aspx
MS14-016 - Important - Vulnerability in Security Account Manager Remote (SAMR) Protocol Could Allow Security Feature Bypass (2934418) http://technet.microsoft.com/security/bulletin/ms14-016
MS14-015 - Important - Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2930275) http://technet.microsoft.com/security/bulletin/ms14-015
MS14-014 - Important - Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677) http://technet.microsoft.com/security/bulletin/ms14-014
MS14-013 - Critical - Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2929961) http://technet.microsoft.com/security/bulletin/ms14-013
MS14-012 - Critical - Cumulative Security Update for Internet Explorer (2925418) http://technet.microsoft.com/security/bulletin/ms14-012
- Microsoft Security Advisory (2934088) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2934088
- Fix it tool available to block Internet Explorer attacks leveraging CVE-2014-0322 http://blogs.technet.com/b/srd/archive/2014/02/19/fix-it-tool-available-to-block-internet-explorer-attacks-leveraging-cve-2014-0322.aspx
MS14-011 - Critical - Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (2928390) http://technet.microsoft.com/security/bulletin/ms14-011
MS14-010 - Critical - Cumulative Security Update for Internet Explorer (2909921) http://technet.microsoft.com/security/bulletin/ms14-010
- MS14-010 CVE-2014-0293 Technical Details and Code(I changed the web permanently) http://www.securityfocus.com/archive/1/531600
MS14-009 - Important - Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2916607) http://technet.microsoft.com/security/bulletin/ms14-009
MS14-007 - Critical - Vulnerability in Direct2D Could Allow Remote Code Execution (2912390) http://technet.microsoft.com/security/bulletin/ms14-007
MS14-006 - Important - Vulnerability in IPv6 Could Allow Denial of Service (2904659) http://technet.microsoft.com/security/bulletin/ms14-006
MS14-005 - Important - Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure (2916036) http://technet.microsoft.com/security/bulletin/ms14-005
MS14-003 - Important - Vulnerability in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2913602) http://technet.microsoft.com/security/bulletin/ms14-003
MS14-002 - Important - Vulnerability in Windows Kernel Could Allow Elevation of Privilege (2914368) http://technet.microsoft.com/security/bulletin/ms14-002
- Microsoft Security Advisory (2914486) Vulnerability in Microsoft Windows Kernel Could Allow Elevation of Privilege http://technet.microsoft.com/security/advisory/2914486
- Microsoft Releases Security Advisory 2914486 http://blogs.technet.com/b/msrc/archive/2013/11/27/microsoft-releases-security-advisory-2914486.aspx
- Microsoft Security Advisory (2914486): Vulnerability in Microsoft Windows Kernel 0 day exploit in wild http://isc.sans.edu/forums/diary/17117
MS14-001 - Important - Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2916605) http://technet.microsoft.com/security/bulletin/ms14-001
Microsoft Security Advisory (2905247) Insecure ASP.NET Site Configuration Could Allow Elevation of Privilege http://technet.microsoft.com/security/advisory/2905247
Updated 9 Sep 14.
Microsoft Security Advisory (2871690) Update to Revoke Non-compliant UEFI Modules http://technet.microsoft.com/security/advisory/2871690
Re-released 27 Feb 14.
MS13-106 - Important - Vulnerability in a Microsoft Office Shared Component Could Allow Security Feature Bypass (2905238) http://technet.microsoft.com/security/bulletin/ms13-106
- MS13-106: Farewell to another ASLR bypass http://blogs.technet.com/b/srd/archive/2013/12/09/ms13-106-another-aslr-bypass-is-gone.aspx
MS13-104 - Important - Vulnerability in Microsoft Office Could Allow Information Disclosure (2909976) http://technet.microsoft.com/security/bulletin/ms13-104
MS13-103 - Important - Vulnerability in ASP.NET SignalR Could Allow Elevation of Privilege (2905244) http://technet.microsoft.com/security/bulletin/ms13-103
MS13-102 - Important - Vulnerability in LPC Client or LPC Server Could Allow Elevation of Privilege (2898715) http://technet.microsoft.com/security/bulletin/ms13-102
MS13-101 - Important - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2880430) http://technet.microsoft.com/security/bulletin/ms13-101
- CORE-2013-0807 - Divide Error in Windows Kernel http://lists.grok.org.uk/pipermail/full-disclosure/2013-December/092215.html
MS13-099 - Critical - Vulnerability in Microsoft Scripting Runtime Object Library Could Allow Remote Code Execution (2909158) http://technet.microsoft.com/security/bulletin/ms13-099
MS13-098 - Critical - Vulnerability in Windows Could Allow Remote Code Execution (2893294) http://technet.microsoft.com/security/bulletin/ms13-098
Updated 21 May 14.
- MS13-098: Update to enhance the security of Authenticode http://blogs.technet.com/b/srd/archive/2013/12/10/ms13-098-update-to-enhance-the-security-of-authenticode.aspx
- Microsoft Security Advisory (2915720) Changes in Windows Authenticode Signature Verification http://technet.microsoft.com/security/advisory/2915720
  Updated 29 Jul 14, 21 May 14, 11 Feb 14, 13 Dec 13.
MS13-097 - Critical - Cumulative Security Update for Internet Explorer (2898785) http://technet.microsoft.com/security/bulletin/ms13-097
MS13-096 - Critical - Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (2908005) http://technet.microsoft.com/security/bulletin/ms13-096
- Microsoft Security Advisory (2896666) Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2896666
- Microsoft Releases Security Advisory 2896666 http://blogs.technet.com/b/msrc/archive/2013/11/05/microsoft-releases-security-advisory-2896666-v2.aspx
- CVE-2013-3906: a graphics vulnerability exploited through Word documents http://blogs.technet.com/b/srd/archive/2013/11/05/cve-2013-3906-a-graphics-vulnerability-exploited-through-word-documents.aspx
- Clarification on Security Advisory 2896666 and the ANS for the November 2013 Security Bulletin Release http://blogs.technet.com/b/msrc/archive/2013/11/07/clarification-on-security-advisory-2896666-and-the-ans-for-the-november-2013-security-bulletin-release.aspx
Microsoft Security Advisory (2916652) Improperly Issued Digital Certificates Could Allow Spoofing http://technet.microsoft.com/security/advisory/2916652
Updated 15 Jan 14, 12 Dec 13.
Microsoft Security Advisory (2880823) Deprecation of SHA-1 Hashing Algorithm for Microsoft Root Certificate Program http://technet.microsoft.com/security/advisory/2880823
Updated 18 May 16.
- Security Advisory 2880823: Recommendation to discontinue use of SHA-1 http://blogs.technet.com/b/srd/archive/2013/11/12/security-advisory-2880823-recommendation-to-discontinue-use-of-sha-1.aspx
Microsoft Security Advisory (2868725) Update for Disabling RC4 http://technet.microsoft.com/security/advisory/2868725
- Security Advisory 2868725: Recommendation to disable RC4 http://blogs.technet.com/b/srd/archive/2013/11/12/security-advisory-2868725-recommendation-to-disable-rc4.aspx
Microsoft Security Advisory (2862152) Vulnerability in DirectAccess Could Allow Security Feature Bypass http://technet.microsoft.com/security/advisory/2862152
Re-released 28 Feb 14.
MS13-095 - Important - Vulnerability in Digital Signatures Could Allow Denial of Service (2868626) http://technet.microsoft.com/security/bulletin/ms13-095
MS13-094 - Important - Vulnerability in Microsoft Outlook Could Allow Information Disclosure (2894514) http://technet.microsoft.com/security/bulletin/ms13-094
- n.runs-SA-2013.006 - Microsoft Outlook/Crypto API - Design Bug http://lists.grok.org.uk/pipermail/full-disclosure/2013-November/092016.html
MS13-093 - Important - Vulnerability in Windows Ancillary Function Driver Could Allow Information Disclosure (2875783) http://technet.microsoft.com/security/bulletin/ms13-093
MS13-092 - Important - Vulnerability in Hyper-V Could Allow Elevation of Privilege (2893986) http://technet.microsoft.com/security/bulletin/ms13-092
MS13-091 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2885093) http://technet.microsoft.com/security/bulletin/ms13-091
MS13-090 - Critical - Cumulative Security Update of ActiveX Kill Bits (2900986) http://technet.microsoft.com/security/bulletin/ms13-090
- Technical details of the targeted attack using IE vulnerability CVE-2013-3918 http://blogs.technet.com/b/srd/archive/2013/11/12/technical-details-of-the-targeted-attack-using-cve-2013-3918.aspx
- IE Zero-Day Vulnerability Exploiting msvcrt.dll http://isc.sans.edu/forums/diary/16985
  New IE Zero-Day found in Watering Hole Attack http://www.fireeye.com/blog/technical/2013/11/new-ie-zero-day-found-in-watering-hole-attack.html
MS13-089 - Critical - Vulnerability in Windows Graphics Device Interface Could Allow Remote Code Execution (2876331) http://technet.microsoft.com/security/bulletin/ms13-089
MS13-088 - Critical - Cumulative Security Update for Internet Explorer (2888505) http://technet.microsoft.com/security/bulletin/ms13-088
MS13-086 - Important - Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2885084) http://technet.microsoft.com/security/bulletin/ms13-086
MS13-085 - Important - Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080) http://technet.microsoft.com/security/bulletin/ms13-085
MS13-083 - Critical - Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2864058) http://technet.microsoft.com/security/bulletin/ms13-083
MS13-082 - Critical - Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2878890) http://technet.microsoft.com/security/bulletin/ms13-082
- Another botched Black Tuesday: KB 2878890 patch brings back two-year-old KB 951847 -- repeatedly http://www.infoworld.com/t/microsoft-windows/another-botched-black-tuesday-kb-2878890-patch-brings-back-two-year-old-kb-951847-repeatedly-228538
- October 2013 MS Update MS13-082 undoes detect of .NET 3.5 SP1 MS11-100 http://answers.microsoft.com/en-us/windows/forum/windows_xp-windows_update/october-2013-ms-update-ms13-082-undoes-detect-of/e03b244c-9871-4bc5-aea9-017e7efec343
MS13-081 - Critical - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2870008) http://technet.microsoft.com/security/bulletin/ms13-081
Re-released 14 Jan 14.
MS13-080 - Critical - Cumulative Security Update for Internet Explorer (2879017) http://technet.microsoft.com/security/bulletin/ms13-080
Updated same day 8 Oct, then 10 Oct 13: CVE-2013-3871 is not patched.
- Microsoft Security Advisory (2887505) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2887505
- Microsoft Releases Security Advisory 2887505 http://blogs.technet.com/b/msrc/archive/2013/09/17/microsoft-releases-security-advisory-2887505.aspx
- CVE-2013-3893: Fix it workaround available http://blogs.technet.com/b/srd/archive/2013/09/17/cve-2013-3893-fix-it-workaround-available.aspx
- Threat Level Yellow: Protection recommendations regarding Internet Explorer exploits in the wild http://isc.sans.edu/forums/diary/16634
  Metaspoit Releases Module to Exploit Unpatched IE Vuln CVE-2013-3893 http://isc.sans.edu/forums/diary/16697
- MS13-080 addresses two vulnerabilities under limited, targeted attacks http://blogs.technet.com/b/srd/archive/2013/10/08/ms13-080-addresses-two-vulnerabilities-under-limited-targeted-attacks.aspx
- Microsoft: One less bug fixed on Patch Tuesday http://www.zdnet.com/microsoft-one-less-bug-fixed-on-patch-tuesday-7000021841/
- Microsoft Internet Explorer CVE-2013-3871 Memory Corruption Vulnerability http://www.securityfocus.com/bid/62802
MS13-079 - Important - Vulnerability in Active Directory Could Allow Denial of Service (2853587) http://technet.microsoft.com/security/bulletin/ms13-079
MS13-078 - Important - Vulnerability in FrontPage Could Allow Information Disclosure (2825621) http://technet.microsoft.com/security/bulletin/ms13-078
MS13-077 - Important - Vulnerability in Windows Service Control Manager Could Allow Elevation of Privilege (2872339) http://technet.microsoft.com/security/bulletin/ms13-077
MS13-076 - Important - Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation of Privilege (2876315) http://technet.microsoft.com/security/bulletin/ms13-076
MS13-075 - Important - Vulnerability in Microsoft Office IME (Chinese) Could Allow Elevation of Privilege (2878687) http://technet.microsoft.com/security/bulletin/ms13-075
MS13-074 - Important - Vulnerabilities in Microsoft Access Could Allow Remote Code Execution (2848637) http://technet.microsoft.com/security/bulletin/ms13-074
Updated 13 Sep 13.
MS13-073 - Important - Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2858300) http://technet.microsoft.com/security/bulletin/ms13-073
Updated 13 Sep 13.
- Updates trying to install over and over again (KB2760411, KB2760588, and KB2760583) http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_update/updates-trying-to-install-over-and-over-again/2a624908-f4b1-46d8-87ed-caa09674ff4f
- Microsoft re-releases patches that were causing an install loop http://isc.sans.edu/forums/diary/16583
MS13-072 - Important - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2845537) http://technet.microsoft.com/security/bulletin/ms13-072
Updated 13 Sep 13.
MS13-071 - Important - Vulnerability in Windows Theme File Could Allow Remote Code Execution (2864063) http://technet.microsoft.com/security/bulletin/ms13-071
MS13-070 - Critical - Vulnerability in OLE Could Allow Remote Code Execution (2876217) http://technet.microsoft.com/security/bulletin/ms13-070
MS13-069 - Critical - Cumulative Security Update for Internet Explorer (2870699) http://technet.microsoft.com/security/bulletin/ms13-069
MS13-068 - Critical - Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (2756473) http://technet.microsoft.com/security/bulletin/ms13-068
- MS13-068: A difficult-to-exploit double free in Outlook http://blogs.technet.com/b/srd/archive/2013/09/10/ms13-068-a-difficult-to-exploit-double-free-in-outlook.aspx
- Outlook 2013: Folder Pane is empty http://social.technet.microsoft.com/Forums/en-US/8ebce46d-1645-4909-8951-d1ca954179ac/outlook-2013-folder-pane-is-empty
  Outlook 2013 Folder Pane Disappears After Installing September 2013 Public Update http://blogs.technet.com/b/office_sustained_engineering/archive/2013/09/11/outlook-folder-pane-disappears-after-installing-september-2013-public-update.aspx
  Description of the Office 2013 update: September 10, 2013 http://support.microsoft.com/kb/2817630
  Description of the Office updates: September 10, 2013 http://support.microsoft.com/kb/2884129
  Description of the Outlook 2013 hotfix package (Outlook-x-none.msp; Outlookintl-en-us.msp): August 13, 2013 http://support.microsoft.com/kb/2817347
  Office 2013 cumulative update for August 2013 http://support.microsoft.com/kb/2873346
- Reboot Wednesday: Yesterday's Patch Tuesday Aftermath http://isc.sans.edu/forums/diary/16556
Microsoft Security Advisory (2862973) Update for Deprecation of MD5 Hashing Algorithm for Microsoft Root Certificate Program http://technet.microsoft.com/security/advisory/2862973
Updated (re-released?) 10 Jun 14, 11 Feb 14, 27 Aug 13.
Microsoft Security Advisory (2861855) Updates to Improve Remote Desktop Protocol Network-level Authentication http://technet.microsoft.com/security/advisory/2861855
MS13-065 - Important - Vulnerability in ICMPv6 could allow Denial of Service (2868623) http://technet.microsoft.com/security/bulletin/ms13-065
MS13-063 - Important - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2859537) http://technet.microsoft.com/security/bulletin/ms13-063
- Mitigating the LdrHotPatchRoutine DEP/ASLR bypass with MS13-063 http://blogs.technet.com/b/srd/archive/2013/08/12/mitigating-the-ldrhotpatchroutine-dep-aslr-bypass-with-ms13-063.aspx
- MS13-063: Vulnerabilities in Windows kernel could allow elevation of privilege: August 13, 2013 http://support.microsoft.com/kb/2859537
  Some users may experience issues with certain games ...
MS13-062 - Important - Vulnerability in Remote Procedure Call Could Allow Elevation of Privilege (2849470) http://technet.microsoft.com/security/bulletin/ms13-062
MS13-060 - Critical - Vulnerability in Unicode Scripts Processor Could Allow Remote Code Execution (2850869) http://technet.microsoft.com/security/bulletin/ms13-060
MS13-059 - Critical - Cumulative Security Update for Internet Explorer (2862772) http://technet.microsoft.com/security/bulletin/ms13-059
- CVE-2013-3186 - The case of a one click sandbox escape on IE http://lists.grok.org.uk/pipermail/full-disclosure/2013-August/091372.html http://zhodiac.hispahack.com/index.php?section=blog&day=21&month=8&year=2013
- UXSS - Internet Explorer EUC-JP Parsing Bug http://insert-script.blogspot.co.at/2013/08/uxss-internet-explorer-euc-jp-parsing.html
Microsoft Security Advisory (2876146) Wireless PEAP-MS-CHAPv2 Authentication Could Allow Information Disclosure http://technet.microsoft.com/security/advisory/2876146
MS13-058 - Important - Vulnerability in Windows Defender Could Allow Elevation of Privilege (2847927) http://technet.microsoft.com/security/bulletin/ms13-058
MS13-057 - Critical - Vulnerability in Windows Media Format Runtime Could Allow Remote Code Execution (2847883) http://technet.microsoft.com/security/bulletin/ms13-057
Re-released 13 Aug 13, 27 Aug 13.
- Problems with MS13-057 http://isc.sans.edu/forums/diary/16168
- 3 more botched Windows patches: KB 2803821, KB 2840628, and KB 2821895 http://www.infoworld.com/t/microsoft-windows/3-more-botched-windows-patches-kb-2803821-kb-2840628-and-kb-2821895-222807
MS13-056 - Critical - Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2845187) http://technet.microsoft.com/security/bulletin/ms13-056
- DirectShow Arbitrary Memory Overwrite Vulnerability ms13-056 http://www.securityfocus.com/archive/1/527426
MS13-055 - Critical - Cumulative Security Update for Internet Explorer (2846071) http://technet.microsoft.com/security/bulletin/ms13-055
- Running in the wild, not for so long http://blogs.technet.com/b/srd/archive/2013/07/10/running-in-the-wild-not-for-so-long.aspx
- Silently patched Internet Explorer 8 exploit now has Metasploit module http://www.sans.org/newsletters/at-risk/xiii/37#notable
MS13-054 - Critical - Vulnerability in GDI+ Could Allow Remote Code Execution (2848295) http://technet.microsoft.com/security/bulletin/ms13-054
MS13-053 - Critical - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2861561) http://technet.microsoft.com/security/bulletin/ms13-053
MS13-052 - Critical - Vulnerabilities in .NET Framework and Silverlight Could Allow Remote Code Execution (2861561) http://technet.microsoft.com/security/bulletin/ms13-052
Re-released 13 Aug 13.
- 3 more botched Windows patches: KB 2803821, KB 2840628, and KB 2821895 http://www.infoworld.com/t/microsoft-windows/3-more-botched-windows-patches-kb-2803821-kb-2840628-and-kb-2821895-222807
EMET 4.0 now available for download http://blogs.technet.com/b/srd/archive/2013/06/17/emet-4-0-now-available-for-download.aspx
Microsoft Security Advisory (2854544) Update to Improve Cryptography and Digital Certificate Handling in Windows http://technet.microsoft.com/security/advisory/2854544
Updated (re-released?) 13 Aug 13, 27 Aug 13, 12 Nov 13.
- Cryptographic Improvements in Microsoft Windows http://blogs.technet.com/b/srd/archive/2013/08/13/cryptographic-improvements-in-microsoft-windows.aspx
MS13-051 - Important - Vulnerability in Microsoft Office Could Allow Remote Code Execution (2839571) http://technet.microsoft.com/security/bulletin/ms13-051
- MS13-051: Get Out of My Office! http://blogs.technet.com/b/srd/archive/2013/06/11/ms13-051-get-out-of-my-office.aspx
MS13-050 - Important - Vulnerability in Windows Print Spooler Components Could Allow Elevation of Privilege (2839894) http://technet.microsoft.com/security/bulletin/ms13-050
MS13-049 - Important - Vulnerability in Kernel-Mode Driver Could Allow Denial of Service (2845690) http://technet.microsoft.com/security/bulletin/ms13-049
MS13-048 - Important - Vulnerability in Windows Kernel Could Allow Information Disclosure (2839229) http://technet.microsoft.com/security/bulletin/ms13-048
MS13-047 - Critical - Cumulative Security Update for Internet Explorer (2838727) http://technet.microsoft.com/security/bulletin/ms13-047
Java: A Fix it for when you cannot let go http://blogs.technet.com/b/srd/archive/2013/05/29/java-when-you-cannot-let-go.aspx
Microsoft Security Advisory (2820197) Update Rollup for ActiveX Kill Bits http://technet.microsoft.com/security/advisory/2820197
Microsoft Security Advisory (2846338) Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2846338
MS13-046 - Important - Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation Of Privilege (2840221) http://technet.microsoft.com/security/bulletin/ms13-046
MS13-045 - Important - Vulnerability in Windows Essentials Could Allow Information Disclosure (2813707) http://technet.microsoft.com/security/bulletin/ms13-045
MS13-044 - Important - Vulnerability in Microsoft Visio Could Allow Information Disclosure (2834692) http://technet.microsoft.com/security/bulletin/ms13-044
MS13-043 - Important - Vulnerability in Microsoft Word Could Allow Remote Code Execution (2830399) http://technet.microsoft.com/security/bulletin/ms13-043
MS13-042 - Important - Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2830397) http://technet.microsoft.com/security/bulletin/ms13-042
MS13-041 - Important - Vulnerability in Lync Could Allow Remote Code Execution (2834695) http://technet.microsoft.com/security/bulletin/ms13-041
MS13-040 - Important - Vulnerabilities in .NET Framework Could Allow Spoofing (2836440) http://technet.microsoft.com/security/bulletin/ms13-040
MS13-039 - Important - Vulnerability in HTTP.sys Could Allow Denial of Service (2829254) http://technet.microsoft.com/security/bulletin/ms13-039
MS13-038 - Critical - Security Update for Internet Explorer (2847204) http://technet.microsoft.com/security/bulletin/ms13-038
- Microsoft Security Advisory (2847140) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2847140
  Updated 8 May 13.
- Microsoft Releases Security Advisory 2847140 http://blogs.technet.com/b/msrc/archive/2013/05/03/microsoft-releases-security-advisory-2847140.aspx
- The Zero-Day Pendulum Swings http://isc.sans.edu/forums/diary/15728
- Fix it for Security Advisory 2847140 is available http://blogs.technet.com/b/msrc/archive/2013/05/08/fix-it-for-security-advisory-2847140-is-available.aspx
  Microsoft "Fix it" available to mitigate Internet Explorer 8 vulnerability http://blogs.technet.com/b/srd/archive/2013/05/08/microsoft-quot-fix-it-quot-available-to-mitigate-internet-explorer-8-vulnerability.aspx
MS13-037 - Critical - Cumulative Security Update for Internet Explorer (2829530) http://technet.microsoft.com/security/bulletin/ms13-037
- MS13-037 addressing Pwn2own vulnerabilities http://blogs.technet.com/b/srd/archive/2013/05/14/ms13-037-addressing-pwn2own-vulnerabilities.aspx
MS13-036 - Important - Vulnerabilities in Kernel-Mode Driver Could Allow Elevation Of Privilege (2829996) http://technet.microsoft.com/security/bulletin/ms13-036
Re-released 23 Apr 13.
- KB2823324 causing boot issues in Brazil and some other locales http://isc.sans.edu/forums/diary/15593
- KB2839011 Released to Address Security Bulletin Update Issue http://blogs.technet.com/b/msrc/archive/2013/04/11/kb2839011-released-to-address-security-bulletin-update-issue.aspx
  You receive an Event ID 55 or a 0xc000021a Stop error in Windows 7 after you install security update 2823324 http://support.microsoft.com/kb/2839011
- New update available for MS13-036 http://blogs.technet.com/b/msrc/archive/2013/04/23/new-update-available-for-ms13-036.aspx
MS13-035 - Important - Vulnerability in HTML Sanitization Component Could Allow Elevation of Privilege (2821818) http://technet.microsoft.com/security/bulletin/ms13-035
MS13-034 - Important - Vulnerability in Microsoft Antimalware Client Could Allow Elevation of Privilege (2823482) http://technet.microsoft.com/security/bulletin/ms13-034
- Vulnerability in Microsoft Security Essentials <v4.2 http://lists.grok.org.uk/pipermail/full-disclosure/2013-May/090395.html
MS13-033 - Important - Vulnerability in Windows Client/Server Run-time Subsystem (CSRSS) Could Allow Elevation of Privilege (2820917) http://technet.microsoft.com/security/bulletin/ms13-033
MS13-032 - Important - Vulnerability in Active Directory Could Lead to Denial of Service (2830914) http://technet.microsoft.com/security/bulletin/ms13-032
MS13-031 - Important - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2813170) http://technet.microsoft.com/security/bulletin/ms13-031
MS13-029 - Critical - Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (2828223) http://technet.microsoft.com/security/bulletin/ms13-029
Re-released 25 Jun 13.
MS13-028 - Critical - Cumulative Security Update for Internet Explorer (2817183) http://technet.microsoft.com/security/bulletin/ms13-028
Microsoft Security Advisory (2819682) Security Updates for Microsoft Windows Store Applications - Security Update 2832006 for Windows Modern Mail http://technet.microsoft.com/security/advisory/2819682
MS13-027 - Important - Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation Of Privilege (2807986) http://technet.microsoft.com/security/bulletin/ms13-027
- MS13-027: Addressing an issue in the USB driver requiring physical access http://blogs.technet.com/b/srd/archive/2013/03/12/ms13-027-addressing-an-issue-in-the-usb-driver-requiring-physical-access.aspx
MS13-025 - Important - Vulnerability in Microsoft OneNote Could Allow Information Disclosure (2816264) http://technet.microsoft.com/security/bulletin/ms13-025
MS13-023 - Critical - Vulnerability in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution (2801261) http://technet.microsoft.com/security/bulletin/ms13-023
MS13-022 - Critical - Vulnerability in Silverlight Could Allow Remote Code Execution (2814124) http://technet.microsoft.com/security/bulletin/ms13-022
MS13-021 - Critical - Cumulative Security Update for Internet Explorer (2809289) http://technet.microsoft.com/security/bulletin/ms13-021
MS13-020 - Critical - Vulnerability in OLE Automation Could Allow Remote Code Execution (2802968) http://technet.microsoft.com/security/bulletin/ms13-020
MS13-019 - Important - Vulnerability in Windows Client/Server Run-time Subsystem (CSRSS) Could Allow Elevation of Privilege (2790113) http://technet.microsoft.com/security/bulletin/ms13-019
MS13-018 - Important - Vulnerability in TCP/IP Could Allow Denial of Service (2790655) http://technet.microsoft.com/security/bulletin/ms13-018
- MS13-018: Hard to let go http://blogs.technet.com/b/srd/archive/2013/02/12/ms13-018-hard-to-let-go.aspx
MS13-017 - Important - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2799494) http://technet.microsoft.com/security/bulletin/ms13-017
MS13-016 - Important - Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778344) http://technet.microsoft.com/security/bulletin/ms13-016
MS13-015 - Important - Vulnerability in .NET Framework Could Allow Elevation of Privilege (2800277) http://technet.microsoft.com/security/bulletin/ms13-015
MS13-013 - Important - Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (2784242) http://technet.microsoft.com/security/bulletin/ms13-013
MS13-011 - Critical - Vulnerability in Media Decompression Could Allow Remote Code Execution (2780091) http://technet.microsoft.com/security/bulletin/ms13-011
MS13-010 - Critical - Vulnerability in Vector Markup Language Could Allow Remote Code Execution (2797052) http://technet.microsoft.com/security/bulletin/ms13-010
MS13-009 - Critical - Cumulative Security Update for Internet Explorer (2792100) http://technet.microsoft.com/security/bulletin/ms13-009
- Microsoft Internet Explorer SLayoutRun Use After Free http://lists.grok.org.uk/pipermail/full-disclosure/2013-February/089644.html
MS13-008 - Critical - Security Update for Internet Explorer (2799329) http://technet.microsoft.com/security/bulletin/ms13-008
Non-cumulative update for IE 6-8.
- Microsoft Security Advisory (2794220) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2794220
- "FixIt" Patch for CVE-2012-4792 Bypassed http://isc.sans.edu/forums/diary/14824
- New vulnerability affecting Internet Explorer 8 users http://blogs.technet.com/b/srd/archive/2012/12/29/new-vulnerability-affecting-internet-explorer-8-users.aspx
MS13-007 - Important - Vulnerability in Open Data Protocol Could Allow Denial of Service (2769327) http://technet.microsoft.com/security/bulletin/ms13-007
MS13-006 - Important - Vulnerability in Microsoft Windows Could Allow Security Feature Bypass (2785220) http://technet.microsoft.com/security/bulletin/ms13-006
MS13-005 - Important - Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778930) http://technet.microsoft.com/security/bulletin/ms13-005
MS13-004 - Important - Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2769324) http://technet.microsoft.com/security/bulletin/ms13-004
MS13-002 - Critical - Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (2756145) http://technet.microsoft.com/security/bulletin/ms13-002
- Microsoft ignores serious MSXML update issue http://lists.grok.org.uk/pipermail/full-disclosure/2013-July/091027.html
  See also "known issues" in http://support.microsoft.com/kb/2758694
- The story of MS13-002: How incorrectly casting fat pointers can make your code explode http://blogs.technet.com/b/srd/archive/2013/08/06/the-story-of-ms13-002-how-incorrectly-casting-fat-pointers-can-make-your-code-explode.aspx
MS13-001 - Critical - Vulnerability in Windows Print Spooler Components Could Allow Remote Code Execution (2769369) http://technet.microsoft.com/security/bulletin/ms13-001
- MS13-001: Vulnerability in Print Spooler service http://blogs.technet.com/b/srd/archive/2013/01/08/ms13-001-vulnerability-in-print-spooler-service.aspx
Microsoft Security Advisory (2798897) Fraudulent Digital Certificates Could Allow Spoofing http://technet.microsoft.com/security/advisory/2798897
MS12-082 - Important - Vulnerability in DirectPlay Could Allow Remote Code Execution (2770660) http://technet.microsoft.com/security/bulletin/ms12-082
MS12-081 - Critical - Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2758857) http://technet.microsoft.com/security/bulletin/ms12-081
MS12-079 - Critical - Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642) http://technet.microsoft.com/security/bulletin/ms12-079
MS12-078 - Critical - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534) http://technet.microsoft.com/security/bulletin/ms12-078
Re-released 20 Dec 12.
MS12-077 - Critical - Cumulative Security Update for Internet Explorer (2761465) http://technet.microsoft.com/security/bulletin/ms12-077
MS12-076 - Important - Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2720184) http://technet.microsoft.com/security/bulletin/ms12-076
MS12-075 - Critical - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2761226) http://technet.microsoft.com/security/bulletin/ms12-075
MS12-074 - Critical - Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2745030) http://technet.microsoft.com/security/bulletin/ms12-074
- MS12-074: Addressing a vulnerability in WPAD's PAC file handling http://blogs.technet.com/b/srd/archive/2012/11/13/ms12-074-addressing-a-vulnerability-in-wpad-s-pac-file-handling.aspx
MS12-072 - Critical - Vulnerabilities in Windows Shell Could Allow Remote Code Execution (2727528) http://technet.microsoft.com/security/bulletin/ms12-072
MS12-071 - Critical - Cumulative Security Update for Internet Explorer (2761451) http://technet.microsoft.com/security/bulletin/ms12-071
Microsoft Security Advisory (2749655) Compatibility Issues Affecting Signed Microsoft Binaries http://technet.microsoft.com/security/advisory/2749655
Updated 13 Nov 12, 11 Dec 12.
- Security Advisory 2749655 and timestamping http://blogs.technet.com/b/srd/archive/2012/10/09/security-advisory-2749655-and-timestamping.aspx
MS12-069 - Important - Vulnerability in Kerberos Could Allow Denial of Service (2743555) http://technet.microsoft.com/security/bulletin/ms12-069
MS12-068 - Important - Vulnerability in Windows Kernel Could Allow Elevation of Privilege (2724197) http://technet.microsoft.com/security/bulletin/ms12-068
MS12-065 - Important - Vulnerability in Microsoft Works Could Allow Remote Code Execution (2754670) http://technet.microsoft.com/security/bulletin/ms12-065
MS12-064 - Critical - Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2742319) http://technet.microsoft.com/security/bulletin/ms12-064
Microsoft Security Advisory (2755801) Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 http://technet.microsoft.com/security/advisory/2755801
Updated 5 Jan 16 (and many times previous).
- Security Advisory 2755801 addresses Adobe Flash Player issues http://blogs.technet.com/b/msrc/archive/2012/09/21/security-advisory-2755801-addresses-adobe-flash-player-issues.aspx
- Security Advisory 2755801 revised to address Adobe Flash Player issues http://blogs.technet.com/b/msrc/archive/2012/10/08/security-advisory-2755801-revised-to-address-adobe-flash-player-issues.aspx
MS12-063 - Critical - Cumulative Security Update for Internet Explorer (2744842) http://technet.microsoft.com/security/bulletin/ms12-063
- IE Zero Day is "For Real" http://isc.sans.edu/forums/diary/14107
- Microsoft Security Advisory (2757760) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2757760
- Additional information about Internet Explorer and Security Advisory 2757760 http://blogs.technet.com/b/msrc/archive/2012/09/18/additional-information-about-internet-explorer-and-security-advisory-2757760.aspx
- Internet Explorer Fix it available now; Security Update scheduled for Friday http://blogs.technet.com/b/msrc/archive/2012/09/19/internet-explorer-fix-it-available-now-security-update-scheduled-for-friday.aspx
- More information on Security Advisory 2757760's Fix It http://blogs.technet.com/b/srd/archive/2012/09/19/more-information-on-security-advisory-2757760-s-fix-it.aspx
- What you need to know about CVE-2012-4969 http://blogs.technet.com/b/mmpc/archive/2012/09/21/what-you-need-to-know-about-cve-2012-4969.aspx
Microsoft Security Advisory (2736233) Update Rollup for ActiveX Kill Bits http://technet.microsoft.com/security/advisory/2736233
Vulnerability in System Center Configuration Manager Could Allow Elevation of Privilege (2741528) http://technet.microsoft.com/security/bulletin/ms12-062
Updated 13 Nov 12.
Vulnerability in Visual Studio Team Foundation Server Could Allow Elevation of Privilege (2719584) http://technet.microsoft.com/security/bulletin/ms12-061
Microsoft Security Advisory (2743314) Unencapsulated MS-CHAP v2 Authentication Could Allow Information Disclosure http://technet.microsoft.com/security/advisory/2743314
- Weaknesses in MS-CHAPv2 authentication http://blogs.technet.com/b/srd/archive/2012/08/20/weaknesses-in-ms-chapv2-authentication.aspx
Microsoft Security Advisory (2661254) Update For Minimum Certificate Key Length http://technet.microsoft.com/security/advisory/2661254
Updated 9 Oct 12.
Vulnerability in Windows Common Controls Could Allow Remote Code Execution (2720573) http://technet.microsoft.com/security/bulletin/ms12-060
- MS12-060: Addressing a vulnerability in MSCOMCTL.OCX's TabStrip control http://blogs.technet.com/b/srd/archive/2012/08/14/ms12-060-addressing-a-vulnerability-in-mscomctl-ocx-s-tabstrip-control.aspx
Vulnerability in Microsoft Visio Could Allow Remote Code Execution (2733918) http://technet.microsoft.com/security/bulletin/ms12-059
Vulnerability in Microsoft Office Could Allow Remote Code Execution (2731879) http://technet.microsoft.com/security/bulletin/ms12-057
Vulnerability in JScript and VBScript Engines Could Allow Remote Code Execution (2706045) http://technet.microsoft.com/security/bulletin/ms12-056
Vulnerability in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2731847) http://technet.microsoft.com/security/bulletin/ms12-055
Updated 9 Oct 12.
Vulnerabilities in Windows Networking Components Could Allow Remote Code Execution (2733594) http://technet.microsoft.com/security/bulletin/ms12-054
Updated 9 Oct 12.
- MS12-054: Not all remote, pre-auth vulnerabilities are equally appetizing for worms.. http://blogs.technet.com/b/srd/archive/2012/08/14/ms12-054-not-all-remote-pre-auth-vulnerabilities-are-equally-appetizing-for-worms.aspx
(WinXP) Vulnerability in Remote Desktop Could Allow Remote Code Execution (2723135) http://technet.microsoft.com/security/bulletin/ms12-053
Updated 9 Oct 12.
Cumulative Security Update for Internet Explorer (2722913) http://technet.microsoft.com/security/bulletin/ms12-052
- Internet Explorer Script Interjection Code Execution http://www.securityfocus.com/archive/1/523929 http://www.securityfocus.com/archive/1/524118
EMET 3.5 Tech Preview leverages security mitigations from the BlueHat Prize http://blogs.technet.com/b/srd/archive/2012/07/24/emet-3-5-tech-preview-leverages-security-mitigations-from-the-bluehat-prize.aspx
Microsoft Security Advisory (2728973) Unauthorized Digital Certificates Could Allow Spoofing http://technet.microsoft.com/security/advisory/2728973
- Microsoft's continuing work on digital certificates http://blogs.technet.com/b/srd/archive/2012/07/10/microsoft-s-continuing-work-on-digital-certificates.aspx
- Announcing the automated updater of untrustworthy certificates and keys http://blogs.technet.com/b/pki/archive/2012/06/12/announcing-the-automated-updater-of-untrustworthy-certificates-and-keys.aspx
Microsoft Security Advisory (2719662) Vulnerabilities in Gadgets Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2719662
Updated 3 Jul 13 with Fix-It solution.
Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2695502) http://technet.microsoft.com/security/bulletin/ms12-050
Vulnerability in TLS Could Allow Information Disclosure (2655992) http://technet.microsoft.com/security/bulletin/ms12-049
Vulnerability in Windows Shell Could Allow Remote Code Execution (2691442) http://technet.microsoft.com/security/bulletin/ms12-048
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2718523) http://technet.microsoft.com/security/bulletin/ms12-047
- [UPDATE] - CORE-2011-1123 - Windows Kernel ReadLayoutFile Heap Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2012-July/087646.html
Vulnerability in Visual Basic for Applications Could Allow Remote Code Execution (2707960) http://technet.microsoft.com/security/bulletin/ms12-046
Updated 13 Nov 12.
Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (2698365) http://technet.microsoft.com/security/bulletin/ms12-045
Cumulative Security Update for Internet Explorer (2719177) http://technet.microsoft.com/security/bulletin/ms12-044
Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2722479) http://technet.microsoft.com/security/bulletin/ms12-043
Re-released 14 Aug 12 with patch for MSXML5 also. Re-released 9 Oct 12.
- Microsoft Security Advisory (2719615) Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2719615
- MSXML: Fix it before fixing it http://blogs.technet.com/b/srd/archive/2012/06/13/msxml-fix-it-before-fixing-it.aspx
- MSXML - 5 steps to stay protected http://blogs.technet.com/b/srd/archive/2012/07/10/msxml-5-steps-to-stay-protected.aspx
- Reliable Exploition of CVE-2012-1889 http://hi.baidu.com/inking26/blog/item/9c2ab11c4784e5aa86d6b6c1.html
- Alert (TA12-174A) Microsoft XML Core Services Attack Activity http://www.us-cert.gov/cas/techalerts/TA12-174A.html
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2711167) http://technet.microsoft.com/security/bulletin/ms12-042
- Windows Kernel Intel x64 SYSRET Vulnerability + Code Signing Bypass Bonus http://lists.grok.org.uk/pipermail/full-disclosure/2012-August/088211.html
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2709162) http://technet.microsoft.com/security/bulletin/ms12-041
Vulnerability in .NET Framework Could Allow Remote Code Execution (2706726) http://technet.microsoft.com/security/bulletin/ms12-038
Cumulative Security Update for Internet Explorer (2699988) http://technet.microsoft.com/security/bulletin/ms12-037
- [CAL-2012-0026] Microsfot IE Same ID Property Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2012-June/087332.html
  [CAL-2012-0023]Microsoft IE Developer Toolbar Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2012-June/087333.html
Vulnerability in Remote Desktop Could Allow Remote Code Execution (2685939) http://technet.microsoft.com/security/bulletin/ms12-036
Microsoft Security Advisory (2718704) Unauthorized Digital Certificates Could Allow Spoofing http://technet.microsoft.com/security/advisory/2718704
- Microsoft certification authority signing certificates added to the Untrusted Certificate Store http://blogs.technet.com/b/srd/archive/2012/06/03/microsoft-certification-authority-signing-certificates-added-to-the-untrusted-certificate-store.aspx
- Security Advisory 2718704: Collision attack details, WU update rollout http://blogs.technet.com/b/msrc/archive/2012/06/06/security-advisory-2718704-collision-attack-details-wu-update-rollout.aspx
- Flame malware collision attack explained http://blogs.technet.com/b/srd/archive/2012/06/06/more-information-about-the-digital-certificates-used-to-sign-the-flame-malware.aspx
Microsoft Security Advisory (2695962) Update Rollup for ActiveX Kill Bits http://technet.microsoft.com/security/advisory/2695962
Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2693777) http://technet.microsoft.com/security/bulletin/ms12-035
- Problems with MS12-035 affecting XP, SBS and Windows 2003? http://isc.sans.edu/forums/diary/13285
Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578) http://technet.microsoft.com/security/bulletin/ms12-034
- MS12-034: Duqu, ten CVE's, and removing keyboard layout file attack surface http://blogs.technet.com/b/srd/archive/2012/05/08/ms12-034-duqu-ten-cve-s-and-removing-keyboard-layout-file-attack-surface.aspx
- CORE-2011-1123: Windows Kernel ReadLayoutFile Heap Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2012-May/086823.html
- Defense in depth -- the Microsoft way (part 12): NOOP security fixes http://lists.grok.org.uk/pipermail/full-disclosure/2013-October/091789.html
Vulnerability in Windows Partition Manager Could Allow Elevation of Privilege (2690533) http://technet.microsoft.com/security/bulletin/ms12-033
Vulnerability in TCP/IP Could Allow Elevation of Privilege (2688338) http://technet.microsoft.com/security/bulletin/ms12-032
- Windows Firewall Bypass Vulnerability and NetBIOS NS http://isc.sans.edu/forums/diary/13156
Vulnerability in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution (2597981) http://technet.microsoft.com/security/bulletin/ms12-031
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2663830) http://technet.microsoft.com/security/bulletin/ms12-030
Vulnerability in Microsoft Word Could Allow Remote Code Execution (2680352) http://technet.microsoft.com/security/bulletin/ms12-029
Vulnerability in Microsoft Office Could Allow Remote Code Execution (2639185) http://technet.microsoft.com/security/bulletin/ms12-028
Vulnerability in Windows Common Controls Could Allow Remote Code Execution (2664258) http://technet.microsoft.com/security/bulletin/ms12-027
- MS12-027: Enhanced protections regarding ActiveX controls in Microsoft Office documents http://blogs.technet.com/b/srd/archive/2012/04/10/ms12-027-enhanced-protections-regarding-activex-controls-in-microsoft-office-documents.aspx
Vulnerability in .NET Framework Could Allow Remote Code Execution (2671605) http://technet.microsoft.com/security/bulletin/ms12-025
Updated 13 Apr 12: some printing functionality may be lost.
- MS12-025 and XBAP: No longer a driveby threat http://blogs.technet.com/b/srd/archive/2012/04/10/ms12-025-and-xbap-no-longer-a-driveby-threat.aspx
- .NET Framework EncoderParameter integer overflow vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2012-April/086640.html
Vulnerability in Windows Could Allow Remote Code Execution (2653956) http://technet.microsoft.com/security/bulletin/ms12-024
Cumulative Security Update for Internet Explorer (2675157) http://technet.microsoft.com/security/bulletin/ms12-023
Microsoft Security Advisory (2647518) Update Rollup for ActiveX Kill Bits http://technet.microsoft.com/security/advisory/2647518
Vulnerability in Expression Design Could Allow Remote Code Execution (2651018) http://technet.microsoft.com/security/bulletin/ms12-022
Vulnerability in Visual Studio Could Allow Elevation of Privilege (2651019) http://technet.microsoft.com/security/bulletin/ms12-021
Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (2671387) http://technet.microsoft.com/security/bulletin/ms12-020
- CVE-2012-0002: A closer look at MS12-020's critical issue http://blogs.technet.com/b/srd/archive/2012/03/13/cve-2012-0002-a-closer-look-at-ms12-020-s-critical-issue.aspx
  Proof-of-Concept Code available for MS12-020 http://blogs.technet.com/b/msrc/archive/2012/03/16/proof-of-concept-code-available-for-ms12-020.aspx
- ZDI-12-044 : Microsoft Remote Desktop Protocol Channel Abort Condition Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2012-March/086140.html
- Details about the ms12-020 proof-of-concept leak http://aluigi.org/adv/ms12-020_leak.txt
Vulnerability in DirectWrite Could Allow Denial of Service (2665364) http://technet.microsoft.com/security/bulletin/ms12-019
Vulnerability in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2641653) http://technet.microsoft.com/security/bulletin/ms12-018
Vulnerabilities in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2651026) http://technet.microsoft.com/security/bulletin/ms12-016
Vulnerabilities in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution (2663510) http://technet.microsoft.com/security/bulletin/ms12-015
Vulnerability in Indeo Codec Could Allow Remote Code Execution (2661637) http://technet.microsoft.com/security/bulletin/ms12-014
- MS12-014: Indeo, a blast from the past http://blogs.technet.com/b/srd/archive/2012/02/14/ms12-014-indeo-a-blast-from-the-past.aspx
Vulnerability in C Run-Time Library Could Allow Remote Code Execution (2654428) http://technet.microsoft.com/security/bulletin/ms12-013
- MS12-013: More information about the msvcrt.dll issue http://blogs.technet.com/b/srd/archive/2012/02/14/ms12-013-more-information-about-the-msvcrt-dll-issue.aspx
Vulnerability in Color Control Panel Could Allow Remote Code Execution (2643719) http://technet.microsoft.com/security/bulletin/ms12-012
Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2663841) http://technet.microsoft.com/security/bulletin/ms12-011
Cumulative Security Update for Internet Explorer (2647516) http://technet.microsoft.com/security/bulletin/ms12-010
Vulnerabilities in Ancillary Function Driver Could Allow Elevation of Privilege (2645640) http://technet.microsoft.com/security/bulletin/ms12-009
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2660465) http://technet.microsoft.com/security/bulletin/ms12-008
Vulnerability in Anti-XSS Library Could Allow Information Disclosure (2607664) http://technet.microsoft.com/security/bulletin/ms12-007
- Microsoft Anti-XSS Library Bypass (MS12-007) http://www.securityfocus.com/archive/1/521307
Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584) http://technet.microsoft.com/security/bulletin/ms12-006
- Microsoft Security Advisory (2588513) Vulnerability in SSL/TLS Could Allow Information Disclosure http://technet.microsoft.com/security/advisory/2588513
- Is SSL broken? - More about Security Advisory 2588513 http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx
- TLS 1.2 - Look before you Leap ! http://isc.sans.edu/forums/diary/11629
  SSL/TLS Vulnerability Details to be Released Friday (Part 2) http://isc.sans.edu/forums/diary/11632
  SSL/TLS (part 3) http://isc.sans.edu/forums/diary/11635
Vulnerability in Windows Could allow Remote Code Execution. (2584146) http://technet.microsoft.com/security/bulletin/ms12-005
- Office arbitrary ClickOnce application execution vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2012-January/085061.html
Vulnerabilities in Windows Media Could Allow Remote Code Execution (2636391) http://technet.microsoft.com/security/bulletin/ms12-004
- More information on MS12-004 http://blogs.technet.com/b/srd/archive/2012/01/10/more-information-on-ms12-004.aspx
Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2646524) http://technet.microsoft.com/security/bulletin/ms12-003
Vulnerability in Windows Object Packager Could Allow Remote Code Execution (2603381) http://technet.microsoft.com/security/bulletin/ms12-002
Vulnerability in Windows Kernel Could Allow Security Feature Bypass (2644615) http://technet.microsoft.com/security/bulletin/ms12-001
- More information on the impact of MS12-001 http://blogs.technet.com/b/srd/archive/2012/01/10/more-information-on-the-impact-of-ms12-001.aspx
Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420) http://technet.microsoft.com/security/bulletin/ms11-100
- Microsoft Security Advisory (2659883) Vulnerability in ASP.NET Could Allow Denial of Service http://technet.microsoft.com/security/advisory/2659883
- VU#903934 Hash table implementations vulnerable to algorithmic complexity attacks http://www.kb.cert.org/vuls/id/903934
- More information about the December 2011 ASP.Net vulnerability http://blogs.technet.com/b/srd/archive/2011/12/27/more-information-about-the-december-2011-asp-net-vulnerability.aspx
- n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084863.html
- SEC Consult SA-20111230-0 :: Critical authentication bypass in Microsoft ASP.NET Forms - CVE-2011-3416 http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084882.html
  SEC Consult SA-20120328-1 :: Microsoft ASP.NET Forms Authentication Bypass - follow-up advisory - CVE-2011-3416 http://lists.grok.org.uk/pipermail/full-disclosure/2012-March/086310.html
- Seeker Advisory: Insecure Redirect in .NET Form Authentication - Redirect From Login Mechanism (ReturnURL Parameter) http://lists.grok.org.uk/pipermail/full-disclosure/2012-March/086227.html
Cumulative Security Update for Internet Explorer (2618444) http://technet.microsoft.com/security/bulletin/ms11-099
Vulnerability in Windows Kernel Could Allow Elevation of Privilege (2633171) http://technet.microsoft.com/security/bulletin/ms11-098
Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2620712) http://technet.microsoft.com/security/bulletin/ms11-097
Vulnerability in Microsoft Excel Could Allow Remote Code Execution (2640241) http://technet.microsoft.com/security/bulletin/ms11-096
Vulnerability in Active Directory Could Allow Remote Code Execution (2640045) http://technet.microsoft.com/security/bulletin/ms11-095
Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2639142) http://technet.microsoft.com/security/bulletin/ms11-094
Vulnerability in OLE Could Allow Remote Code Execution (2624667) http://technet.microsoft.com/security/bulletin/ms11-093
Vulnerability in Windows Media Could Allow Remote Code Execution (2648048) http://technet.microsoft.com/security/bulletin/ms11-092
Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2607702) http://technet.microsoft.com/security/bulletin/ms11-091
Cumulative Security Update of ActiveX Kill Bits (2618451) http://technet.microsoft.com/security/bulletin/ms11-090
Vulnerability in Microsoft Office Could Allow Remote Code Execution (2590602) http://technet.microsoft.com/security/bulletin/ms11-089
Vulnerability in Microsoft Office IME (Chinese) Could Allow Elevation of Privilege (2652016) http://technet.microsoft.com/security/bulletin/ms11-088
Vulnerability in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2639417) http://technet.microsoft.com/security/bulletin/ms11-087
- More information on MS11-087 http://blogs.technet.com/b/srd/archive/2011/12/13/more-information-on-ms11-087.aspx
  The bulletin includes a workaround to disable this remote code execution attack surface. [I cannot find that!]
  We encourage you to ... consider also blocking the browser-based font attack surface from within Internet Explorer...
- Microsoft Security Advisory (2639658) Vulnerability in TrueType Font Parsing Could Allow Elevation of Privilege http://technet.microsoft.com/security/advisory/2639658
  Updated 11 Nov 11: Impact of Workaround ... Microsoft Office software will fail to generate PDF files.
- Microsoft Windows Kernel Word File Handling Remote Code Execution Vulnerability http://www.securityfocus.com/bid/50462
You can circumvent AppLocker rules by using an Office macro on a computer that is running Windows 7 or Windows Server 2008 R2 http://support.microsoft.com/kb/2532445
- Circumventing SRP and AppLocker, By Design http://blog.didierstevens.com/2011/01/24/circumventing-srp-and-applocker-by-design/
- Bypassing Windows AppLocker using VB script in Word and Excel http://www.mountknowledge.nl/2011/01/28/bypassing-windows-applocker-using-vb-script-in-word-and-excel/
Microsoft Security Advisory (2641690) Fraudulent Digital Certificates Could Allow Spoofing http://technet.microsoft.com/security/advisory/2641690
Re-released 16 Nov 11.
Vulnerability in Active Directory Could Allow Elevation of Privilege (2630837) http://technet.microsoft.com/security/bulletin/ms11-086
Vulnerability in Windows Mail and Windows Meeting Space Could Allow Remote Code Execution (2620704) http://technet.microsoft.com/security/bulletin/ms11-085
Vulnerability in Windows Kernel-Mode Drivers Could Allow Denial of Service (2617657) http://technet.microsoft.com/security/bulletin/ms11-084
Vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) http://technet.microsoft.com/security/bulletin/ms11-083
Vulnerabilities in Host Integration Server Could Allow Denial of Service (2607670) http://technet.microsoft.com/security/bulletin/ms11-082
Cumulative Security Update for Internet Explorer (2586448) http://technet.microsoft.com/security/bulletin/ms11-081
- Two Remote Code Execution Vulnerabilities in Internet Explorer http://lists.grok.org.uk/pipermail/full-disclosure/2011-October/083500.html
Vulnerability in Ancillary Function Driver Could Allow Elevation of Privilege (2592799) http://technet.microsoft.com/security/bulletin/ms11-080
Vulnerabilities in Microsoft Forefront Unified Access Gateway Could Cause Remote Code Execution (2544641) http://technet.microsoft.com/security/bulletin/ms11-079
- SEC Consult SA-20111012-0 :: Client-side remote file upload & command execution in Microsoft Forefront UAG Remote Access Agent (CVE-2011-1969) http://lists.grok.org.uk/pipermail/full-disclosure/2011-October/083503.html
Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2604930) http://technet.microsoft.com/security/bulletin/ms11-078
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2567053) http://technet.microsoft.com/security/bulletin/ms11-077
Vulnerability in Windows Media Center Could Allow Remote Code Execution (2604926) http://technet.microsoft.com/security/bulletin/ms11-076
Vulnerability in Microsoft Active Accessibility Could Allow Remote Code Execution (2623699) http://technet.microsoft.com/security/bulletin/ms11-075
Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2451858) http://technet.microsoft.com/security/bulletin/ms11-074
- Seeker Advisory Sep11: Reflected Cross Site Scripting in Microsoft SharePoint Portal http://lists.grok.org.uk/pipermail/full-disclosure/2011-September/082668.html
  Seeker Advisory Sep11: Insecure Redirect in Microsoft SharePoint Portal http://lists.grok.org.uk/pipermail/full-disclosure/2011-September/082673.html
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2587634) http://technet.microsoft.com/security/bulletin/ms11-073
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2587505) http://technet.microsoft.com/security/bulletin/ms11-072
Vulnerability in Windows Components Could Allow Remote Code Execution (2570947) http://technet.microsoft.com/security/bulletin/ms11-071
Vulnerability in WINS Could Allow Elevation of Privilege (2571621) http://technet.microsoft.com/security/bulletin/ms11-070
- CORE-2011-0526 - MS WINS ECommEndDlg Input Validation Error http://lists.grok.org.uk/pipermail/full-disclosure/2011-September/082664.html
Microsoft Security Advisory (2607712) Fraudulent Digital Certificates Could Allow Spoofing http://technet.microsoft.com/security/advisory/2607712
Actual update (of Microsoft Untrusted Certificate Store) released on 6 Sep 11.
Updated with new update released 19 Sep 11 (previous 13 Sep 11).
See http://blogs.technet.com/b/msrc/p/september-2011-security-bulletin-q-a.aspx about relationship to 2616676.
Microsoft Security Advisory (2562937) Update Rollup for ActiveX Kill Bits http://technet.microsoft.com/security/advisory/2562937
Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814) http://technet.microsoft.com/security/bulletin/ms11-069
Vulnerability in Windows Kernel Could Allow Denial of Service (2556532) http://technet.microsoft.com/security/bulletin/ms11-068
Vulnerability in Microsoft Report Viewer Could Allow Information Disclosure (2578230) http://technet.microsoft.com/security/bulletin/ms11-067
Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2514842) http://technet.microsoft.com/security/bulletin/ms11-066
Vulnerability in Remote Desktop Protocol Could Allow Denial of Service (2570222) http://technet.microsoft.com/security/bulletin/ms11-065
Vulnerabilities in TCP/IP Stack Could Allow Denial of Service (2563894) http://technet.microsoft.com/security/bulletin/ms11-064
Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2567680) http://technet.microsoft.com/security/bulletin/ms11-063
Vulnerability in Remote Access Service NDISTAPI Driver Could Allow Elevation of Privilege (2566454) http://technet.microsoft.com/security/bulletin/ms11-062
Vulnerability in Remote Desktop Web Access Could Allow Elevation of Privilege (2546250) http://technet.microsoft.com/security/bulletin/ms11-061
Vulnerabilities in Microsoft Visio Could Cause Remote Code Execution (2560978) http://technet.microsoft.com/security/bulletin/ms11-060
Vulnerability in Data Access Components Could Allow Remote Code Execution (2560656) http://technet.microsoft.com/security/bulletin/ms11-059
Cumulative Security Update for Internet Explorer (2530548) http://technet.microsoft.com/security/bulletin/ms11-057
- ZDI-11-247: Microsoft Internet Explorer XSLT SetViewSlave Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-August/082192.html
  ZDI-11-248: Microsoft Internet Explorer 9 STYLE Object Parsing Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-August/082194.html
  ZDI-11-249: (Pwn2Own) Microsoft Internet Explorer Protected Mode Bypass Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-August/082195.html
- Fwd: {Lostmon's Group} Internet Explorer 6, 7 and 8 Window.open race condition Vulnerability http://www.securityfocus.com/archive/1/519219
Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2507938) http://technet.microsoft.com/security/bulletin/ms11-056
Vulnerability in Microsoft Visio Could Allow Remote Code Execution (2560847) http://technet.microsoft.com/security/bulletin/ms11-055
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2555917) http://technet.microsoft.com/security/bulletin/ms11-054
Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (2566220) http://technet.microsoft.com/security/bulletin/ms11-053
Vulnerability in Vector Markup Language Could Allow Remote Code Execution (2544521) http://technet.microsoft.com/security/bulletin/ms11-052
- ZDI-11-197: Microsoft Internet Explorer vgx.dll imagedata Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-June/081467.html
Cumulative Security Update for Internet Explorer (2530548) http://technet.microsoft.com/security/bulletin/ms11-050
- ZDI-11-193: Microsoft Internet Explorer DOM Modification Race Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-June/081463.html
  ZDI-11-194: Microsoft Internet Explorer layout-grid-char style Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-June/081464.html
  ZDI-11-195: Microsoft Internet Explorer selection.empty Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-June/081465.html
  ZDI-11-196: Microsoft Internet Explorer HTTP 302 Redirect Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-June/081466.html
  ZDI-11-198: (Pwn2Own) Microsoft Internet Explorer Uninitialized Variable Information Leak Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-June/081468.html
- Microsoft Internet Explorer 'toStaticHTML' HTML Sanitizing Information Disclosure http://www.securityfocus.com/archive/1/518943
Vulnerability in the Microsoft XML Editor Could Allow Information Disclosure (2543893) http://technet.microsoft.com/security/bulletin/ms11-049
Vulnerability in SMB Server Could Allow Denial of Service (2536275) http://technet.microsoft.com/security/bulletin/ms11-048
Vulnerability in Ancillary Function Driver Could Allow Elevation of Privilege (2503665) http://technet.microsoft.com/security/bulletin/ms11-046
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146) http://technet.microsoft.com/security/bulletin/ms11-045
Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814) http://technet.microsoft.com/security/bulletin/ms11-044
Vulnerability in SMB Client Could Allow Remote Code Execution (2536276) http://technet.microsoft.com/security/bulletin/ms11-043
Re-relased 9 Aug 11.
Vulnerabilities in Distributed File System Could Allow Remote Code Execution (2535512) http://technet.microsoft.com/security/bulletin/ms11-042
Vulnerability in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2525694) http://technet.microsoft.com/security/bulletin/ms11-041
Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2514842) http://technet.microsoft.com/security/bulletin/ms11-039
Vulnerability in OLE Automation Could Allow Remote Code Execution (2476490) http://technet.microsoft.com/security/bulletin/ms11-038
Vulnerability in MHTML Could Allow Information Disclosure (2544893) http://technet.microsoft.com/security/bulletin/ms11-037
Re-released 8 Nov 11.
Vulnerabilities in Microsoft Office Powerpoint Could Allow Remote Code Execution (2545814) http://technet.microsoft.com/security/bulletin/ms11-036
Vulnerability in WINS could allow remote code execution (2524426) http://technet.microsoft.com/security/bulletin/ms11-035
Microsoft Security Advisory (2506014) Update for the Windows Operating System Loader http://technet.microsoft.com/security/advisory/2506014
Microsoft Security Advisory (2501584) Release of Microsoft Office File Validation for Microsoft Office http://technet.microsoft.com/security/advisory/2501584
Office File Validation General Availability Announcement http://blogs.technet.com/b/office_sustained_engineering/archive/2011/04/11/office-file-validation-general-availability-announcement.aspx
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2506223) http://technet.microsoft.com/security/bulletin/ms11-034
Vulnerability in WordPad Text Converters Could Allow Remote Code Execution (2485663) http://technet.microsoft.com/security/bulletin/ms11-033
Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Remote Code Execution (2507618) http://technet.microsoft.com/security/bulletin/ms11-032
Vulnerability in JScript and VBScript Scripting Engines Could Allow Remote Code Execution (2514666) http://technet.microsoft.com/security/bulletin/ms11-031
Vulnerability in DNS Resolution Could Allow Remote Code Execution (2509553) http://technet.microsoft.com/security/bulletin/ms11-030
Vulnerability in GDI+ Could Allow Remote Code Execution (2489979) http://technet.microsoft.com/security/bulletin/ms11-029
Vulnerability in .NET Framework Could Allow Remote Code Execution (2484015) http://technet.microsoft.com/security/bulletin/ms11-028
Cumulative Security Update of ActiveX Kill Bits (2508272) http://technet.microsoft.com/security/bulletin/ms11-027
Vulnerability in MHTML Could Allow Information Disclosure (2503658) http://technet.microsoft.com/security/bulletin/ms11-026
- MS mhtml patch bypass http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080335.html
- Microsoft Security Advisory (2501696) Vulnerability in MHTML Could Allow Information Disclosure http://technet.microsoft.com/security/advisory/2501696
- More information about the MHTML Script Injection vulnerability http://blogs.technet.com/b/srd/archive/2011/01/28/more-information-about-the-mhtml-script-injection-vulnerability.aspx
- Hacking with mhtml protocol handler http://lists.grok.org.uk/pipermail/full-disclosure/2011-January/078536.html http://lists.grok.org.uk/pipermail/full-disclosure/2011-January/078537.html http://lists.grok.org.uk/pipermail/full-disclosure/2011-January/078733.html
Vulnerability in Microsoft Foundation Class (MFC) Library Could Allow Remote Code Execution (2500212) http://technet.microsoft.com/security/bulletin/ms11-025
Vulnerability in Windows Fax Cover Page Editor Could Allow Remote Code Execution (2527308) http://technet.microsoft.com/security/bulletin/ms11-024
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489293) http://technet.microsoft.com/security/bulletin/ms11-023
Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2489283) http://technet.microsoft.com/security/bulletin/ms11-022
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279) http://technet.microsoft.com/security/bulletin/ms11-021
Vulnerability in SMB Server Could Allow Remote Code Execution (2508429) http://technet.microsoft.com/security/bulletin/ms11-020
Vulnerabilities in SMB Client Could Allow Remote Code Execution (2511455) http://technet.microsoft.com/security/bulletin/ms11-019
Cumulative Security Update for Internet Explorer (2497640) http://technet.microsoft.com/security/bulletin/ms11-018
Re-released 16 May 11.
- MS11-018 addresses the IE8 pwn2own vulnerability http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-018-addresses-the-ie8-pwn2own-vulnerability.aspx
Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (2508062) http://technet.microsoft.com/security/bulletin/ms11-017
- Microsoft Remote Desktop Connection Client DLL Loading Arbitrary Code Execution Vulnerability http://www.securityfocus.com/bid/46678
  Microsoft Remote Desktop Protocol 'ieframe.dll' DLL Loading Arbitrary Code Execution Vulnerability http://www.securityfocus.com/bid/42853
Vulnerabilities in Microsoft Office Groove Could Allow Remote Code Execution (2494047) http://technet.microsoft.com/security/bulletin/ms11-016
Vulnerabilities in Windows Media Could Allow Remote Code Execution (2510030) http://technet.microsoft.com/security/bulletin/ms11-015
Microsoft Security Advisory (2491888) Vulnerability in Microsoft Malware Protection Engine Could Allow Elevation of Privilege http://technet.microsoft.com/security/advisory/2491888
See previous MS08-029 and MS07-010 also.
Vulnerability in Local Security Authority Subsystem Service Could Allow Local Elevation of Privilege (2478960) http://technet.microsoft.com/security/bulletin/ms11-014
Vulnerabilities in Kerberos Could Allow Elevation of Privilege (2496930) http://technet.microsoft.com/security/bulletin/ms11-013
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2479628) http://technet.microsoft.com/security/bulletin/ms11-012
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2393802) http://technet.microsoft.com/security/bulletin/ms11-011
- ZDI-11-064: Microsoft Windows WmiTraceMessageVa Local Kernel Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-February/079080.html
Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2476687) http://technet.microsoft.com/security/bulletin/ms11-010
(W7) Vulnerability in JScript and VBScript Scripting Engines Could Allow Information Disclosure (2475792) http://technet.microsoft.com/security/bulletin/ms11-009
Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2451879) http://technet.microsoft.com/security/bulletin/ms11-008
- ZDI-11-063: Microsoft Visio 2007 LZW Stream Decompression Exception Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-February/079079.html
Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Remote Code Execution (2485376) http://technet.microsoft.com/security/bulletin/ms11-007
Vulnerability in Windows Shell Graphics Processing Could Allow Remote Code Execution (2483185) http://technet.microsoft.com/security/bulletin/ms11-006
- Microsoft Security Advisory (2490606) Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2490606
- iDefense Security Advisory 02.08.11: Microsoft Windows Picture and Fax Viewer Library http://www.securityfocus.com/archive/1/516281
Cumulative Security Update for Internet Explorer (2416400) http://technet.microsoft.com/security/bulletin/ms11-003
- Microsoft Security Advisory (2488013) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2488013
- New Internet Explorer vulnerability affecting all versions of IE http://blogs.technet.com/b/srd/archive/2010/12/22/new-internet-explorer-vulnerability-affecting-all-versions-of-ie.aspx
  New workaround included in Security Advisory 2488013 http://blogs.technet.com/b/srd/archive/2011/01/11/new-workaround-included-in-security-advisory-2488013.aspx
- MS warns over zero-day IE bug http://www.theregister.co.uk/2010/12/23/ms_zero_day/
- Microsoft Internet Explorer CSS Parsing Remote Memory Corruption Vulnerability http://www.securityfocus.com/bid/45246
Vulnerabilities in Microsoft Data Access Components Could Allow Remote Code Execution (2451910) http://technet.microsoft.com/security/bulletin/ms11-002
- ZDI-11-001: Microsoft Data Access Components DSN Overflow Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-January/078432.html
  ZDI-11-002: Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2011-January/078433.html
(Vista) Vulnerability in Windows Backup Manager Could Allow Remote Code Execution (2478935) http://technet.microsoft.com/security/bulletin/ms11-001
Vulnerabilities in Microsoft Office Graphics Filters Could Allow for Remote Code Execution (968095) http://technet.microsoft.com/security/bulletin/ms10-105
- Secunia Research: Microsoft Office PICT Filter Integer Truncation Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-December/078135.html
  Secunia Research: Microsoft Office TIFF Image Converter Endian Conversion Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-December/078137.html
  Secunia Research: Microsoft Office Document Imaging Endian Conversion Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-December/078138.html
  Secunia Research: Microsoft Office TIFF Image Converter Two Buffer Overflows http://lists.grok.org.uk/pipermail/full-disclosure/2010-December/078139.html
  Secunia Research: Microsoft Office FlashPix Property Set Parsing Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2010-December/078149.html
  Secunia Research: Microsoft Office FlashPix Tile Data Two Buffer Overflows http://lists.grok.org.uk/pipermail/full-disclosure/2010-December/078150.html
Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (2292970) http://technet.microsoft.com/security/bulletin/ms10-103
Vulnerability in Consent User Interface Could Allow Elevation of Privilege (2442962) http://technet.microsoft.com/security/bulletin/ms10-100
Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591) http://technet.microsoft.com/security/bulletin/ms10-099
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2436673) http://technet.microsoft.com/security/bulletin/ms10-098
Insecure Library Loading in Internet Connection Signup Wizard Could Allow Remote Code Execution (2443105) http://technet.microsoft.com/security/bulletin/ms10-097
Vulnerability in Windows Address Book Could Allow Remote Code Execution (2423089) http://technet.microsoft.com/security/bulletin/ms10-096
Vulnerability in Microsoft Windows Could Allow Remote Code Execution (2385678) http://technet.microsoft.com/security/bulletin/ms10-095
Vulnerability in Windows Media Encoder Could Allow Remote Code Execution (2447961) http://technet.microsoft.com/security/bulletin/ms10-094
Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (2424434) http://technet.microsoft.com/security/bulletin/ms10-093
Vulnerability in the OpenType Font Format (OTF) Driver Could Allow Elevation of Privilege (2279986) http://technet.microsoft.com/security/bulletin/ms10-092
Vulnerabilities in the OpenType Font (OTF) Driver Could Allow Remote Code Execution (2296199) http://technet.microsoft.com/security/bulletin/ms10-091
Cumulative Security Update for Internet Explorer (2360131) http://technet.microsoft.com/security/bulletin/ms10-090
- Microsoft Security Advisory (2458511) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2458511
- Microsoft Releases Security Advisory 2458511 http://blogs.technet.com/b/msrc/archive/2010/11/02/microsoft-releases-security-advisory-2458511.aspx
- DEP, EMET protect against attacks on the latest Internet Explorer vulnerability http://blogs.technet.com/b/srd/archive/2010/11/03/dep-emet-protect-against-attacks-on-the-latest-internet-explorer-vulnerability.aspx
- Microsoft Internet Explorer CSS Tags Remote Code Execution Vulnerability http://www.securityfocus.com/bid/44536/
- ZDI-10-288: Microsoft Internet Explorer Recursive Select Element Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-December/077939.html
  ZDI-10-289: Microsoft Internet Explorer HTML+Time Element outerText Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-December/077940.html
- iDefense Security Advisory 12.14.10: Microsoft Internet Explorer HTML Object Memory Corruption Vulnerability http://www.securityfocus.com/archive/1/515266
  iDefense Security Advisory 12.14.10: Microsoft Internet Explorer CSS Style Table Layout Uninitialized Memory Vulnerability http://www.securityfocus.com/archive/1/515258
Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2293386) http://technet.microsoft.com/security/bulletin/ms10-088
- Secunia Research: Microsoft PowerPoint PP7X32.DLL Record Parsing Vulnerability http://www.securityfocus.com/archive/1/514692
- ZDI-10-245: Microsoft Office PowerPoint Unknown Animation Node Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077318.html
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930) http://technet.microsoft.com/security/bulletin/ms10-087
- Secunia Research: Microsoft Office Drawing Shape Container Parsing Vulnerability http://www.securityfocus.com/archive/1/514699
- ZDI-10-246: Microsoft Excel MSODrawing Improper Exception Handling Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077319.html
- iDefense Security Advisory 11.09.10: Microsoft Word RTF File Parsing Stack Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077324.html
- ASPR #2010-11-10-1: Remote Binary Planting in Microsoft PowerPoint 2010 http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077328.html
  ASPR #2010-11-10-2: Remote Binary Planting in Microsoft Word 2010 http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077327.html
  ASPR #2010-11-10-3: Remote Binary Planting in Microsoft Excel 2010 http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077326.html
Vulnerabilities in SChannel could allow Denial of Service (2207566) http://technet.microsoft.com/security/bulletin/ms10-085
Vulnerability in Windows Local Procedure Call Could Cause Elevation of Privilege (2360937) http://technet.microsoft.com/security/bulletin/ms10-084
Vulnerability in COM Validation in Windows Shell and WordPad Could Allow Remote Code Execution (2405882) http://technet.microsoft.com/security/bulletin/ms10-083
Vulnerability in Windows Media Player Could Allow Remote Code Execution (2378111) http://technet.microsoft.com/security/bulletin/ms10-082
- Microsoft Windows Media Player memory corruption http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076863.html
Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2296011) http://technet.microsoft.com/security/bulletin/ms10-081
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2293211) http://technet.microsoft.com/security/bulletin/ms10-080
- Secunia Research: Microsoft Excel Lotus 1-2-3 File Parsing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076866.html
  Secunia Research: Microsoft Excel Record Parsing Integer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076867.html
  Secunia Research: Microsoft Excel Extra Out of Boundary Record Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076868.html
  Secunia Research: Microsoft Excel Ghost Record Type Parsing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076870.html
Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2293194) http://technet.microsoft.com/security/bulletin/ms10-079
Vulnerability in the OpenType Font Format (OTF) Driver Could Allow Elevation of Privilege (2279986) http://technet.microsoft.com/security/bulletin/ms10-078
- [CORE-2010-0624] MS OpenType CFF Parsing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076844.html
Vulnerability in .NET Framework Could Allow Remote Code Execution (2160841) http://technet.microsoft.com/security/bulletin/ms10-077
Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution (982132) http://technet.microsoft.com/security/bulletin/ms10-076
- ZDI-10-198: Microsoft Internet Explorer EOT File hdmx Parsing Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076849.html
Vulnerability in Media Player Network Sharing Service Could Cause Remote Code Execution (2281679) http://technet.microsoft.com/security/bulletin/ms10-075
- ZDI-10-199: Windows Media Player Network Sharing ServiceRemote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076850.html
Vulnerability in Microsoft Foundation Classes Could Allow Remote Code Execution (2387149) http://technet.microsoft.com/security/bulletin/ms10-074
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (981957) http://technet.microsoft.com/security/bulletin/ms10-073
Cumulative Security Update for Internet Explorer (2360131) http://technet.microsoft.com/security/bulletin/ms10-071
- ZDI-10-197: Microsoft Internet Explorer Stylesheet PrivateFind Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076848.html
- Internet Explorer Uninitialized Memory Corruption Vulnerability - CVE-2010-3331 http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076851.html
- IE8 Css Cross-Domain Information Disclosure Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076907.html
- CORE-2010-0517 - Microsoft Office HtmlDlgHelper class memory corruption http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076921.html
(servers only?) Vulnerability in ASP.NET Could Allow Information Disclosure (2418042) http://technet.microsoft.com/security/bulletin/ms10-070
- Microsoft Security Advisory (2416728) Vulnerability in ASP.NET Could Allow Information Disclosure http://technet.microsoft.com/security/advisory/2416728
- Important: ASP.NET Security Vulnerability http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx http://weblogs.asp.net/scottgu/archive/2010/09/24/update-on-asp-net-vulnerability.aspx
- Breaking .NET encryption with or without Padding Oracle http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076735.html
(servers only?) Microsoft Security Advisory (2401593) Vulnerability in Outlook Web Access Could Allow Elevation of Privilege http://technet.microsoft.com/security/advisory/2401593
(Exchange server needs to be updated)
(WXP) Vulnerability in Windows Client/Server Runtime Subsystem Could Allow Elevation of Privilege (2121546) http://technet.microsoft.com/security/bulletin/ms10-069
Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539) http://technet.microsoft.com/security/bulletin/ms10-068
(WXP) Vulnerability in WordPad Text Converters Could Allow Remote Code Execution (2259922) http://technet.microsoft.com/security/bulletin/ms10-067
(WXP) Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802) http://technet.microsoft.com/security/bulletin/ms10-066
Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Remote Code Execution (2267960) http://technet.microsoft.com/security/bulletin/ms10-065
Why is this for all Windows versions? I did not think they ran IIS service by default...
Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (2315011) http://technet.microsoft.com/security/bulletin/ms10-064
- Secunia Research: Microsoft Outlook Content Parsing Integer Underflow Vulnerability http://www.securityfocus.com/archive/1/513713
Vulnerability in Unicode Scripts Processor Could Allow Remote Code Execution (2320113) http://technet.microsoft.com/security/bulletin/ms10-063
Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558) http://technet.microsoft.com/security/bulletin/ms10-062
Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290) http://technet.microsoft.com/security/bulletin/ms10-061
Microsoft Security Advisory (2269637) Insecure Library Loading Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2269637
Updated 13 May 14 (and many times previous).
NOT updated 10 Mar 15 for MS15-020, 14 Jul 15 for MS15-069, 8 Dec 15 for MS15-132.
NOT updated 9 Feb 16 for MS16-014(that does not actually fix).
NOT updated 8 Mar 16 for MS16-025, 12 Apr 16 for MS16-037, 10 May 16 for MS16-058, 14 Jun 16 for MS16-070.
- Microsoft Security Advisory 2269637 Released http://blogs.technet.com/b/msrc/archive/2010/08/21/microsoft-security-advisory-2269637-released.aspx
- More information about the DLL Preloading remote attack vector http://blogs.technet.com/b/srd/archive/2010/08/23/more-information-about-dll-preloading-remote-attack-vector.aspx
  Did not LeBlanc say in 2008 that this was fixed, with SafeDllSearchMode as the default?
- Unpatched Flaw Affects Hundreds of Windows Applications (August 19, 2010) http://www.sans.org/newsletters/newsbites/xii/66#301
- DLL hijacking vulnerabilities http://isc.sans.edu/forums/diary/9445
- Researcher told Microsoft of Windows apps zero-day bugs 6 months ago http://www.computerworld.com/s/article/9181358
  The issue appears to have been first reported in 2000...
  as used by Nimda worm http://dpnm.postech.ac.kr/research/04/nsri/papers/010919-Analysis-Nimda.pdf
- Microsoft warns of DLL vulnerability in applications http://www.h-online.com/security/news/item/Microsoft-warns-of-DLL-vulnerability-in-applications-1064584.html
  This attack scenario is not entirely novel - the NSA warned of the problem of "DLL spoofing" in its "Windows NT Security Guidelines" in 1998.
- An Intro to... Windows NT Security by Steve Sutton http://www.blacksheepnetworks.com/security/info/nt/ntintrotosec.htm
  mentions DLL spoofing and seems dated 1997
- Microsoft Windows based applications may insecurely load dynamic libraries http://www.kb.cert.org/vuls/id/707943
- Online Binary Planting Exposure Test http://lists.grok.org.uk/pipermail/full-disclosure/2010-September/076293.html
  Binary Planting Goes "EXE" http://blog.acrossecurity.com/2010/09/binary-planting-goes-exe.html http://www.securityfocus.com/archive/1/513595
  Binary Planting Attack Vectors - There's more than one way to skin a cat... or plant a binary, for that matter http://lists.grok.org.uk/pipermail/full-disclosure/2010-September/076620.html
  How Visual Studio Makes Your Applications Vulnerable to Binary Planting http://www.securityfocus.com/archive/1/514426 http://www.securityfocus.com/archive/1/514465
  Breaking The SetDllDirectory Protection Against Binary Planting http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/077122.html
  Updated online binary planting exposure test continues operation http://lists.grok.org.uk/pipermail/full-disclosure/2010-December/077975.html
- Silently Pwning Protected-Mode IE9 and Innocent Windows Applications http://lists.grok.org.uk/pipermail/full-disclosure/2011-May/080745.html
  COM Server-Based Binary Planting Proof Of Concept http://lists.grok.org.uk/pipermail/full-disclosure/2011-June/081193.html
- Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking http://lists.grok.org.uk/pipermail/full-disclosure/2011-September/082543.html http://lists.grok.org.uk/pipermail/full-disclosure/2011-September/082578.html
- Microsoft's Binary Planting Clean-Up Mission http://lists.grok.org.uk/pipermail/full-disclosure/2011-September/082682.html
- Downloads Folder: A Binary Planting Minefield http://lists.grok.org.uk/pipermail/full-disclosure/2012-February/085774.html
  DLL Hijacking Against Installers In Browser Download Folders for Phish and Profit http://lists.grok.org.uk/pipermail/full-disclosure/2012-August/088036.html
- ACROS Blog: Adobe Reader X (10.1.2) msiexec.exe Planting http://lists.grok.org.uk/pipermail/full-disclosure/2012-April/086496.html
- Privilege Escalation Vulnerability in Microsoft Windows (HTB23108) http://www.securityfocus.com/archive/1/524354
- See also MS13-034 and
  Vulnerability in Microsoft Security Essentials <v4.2 http://lists.grok.org.uk/pipermail/full-disclosure/2013-May/090395.html
- Defense in depth -- the Microsoft way (part 3) http://lists.grok.org.uk/pipermail/full-disclosure/2013-June/090735.html
  Defense in depth -- the Microsoft way (part 12): NOOP security fixes http://lists.grok.org.uk/pipermail/full-disclosure/2013-October/091789.html
  Defense in depth -- the Microsoft way (part 37): MMC.exe and DrvInst.exe load and execute ".dll" with elevated resp. SYSTEM privileges http://seclists.org/fulldisclosure/2015/Dec/30
- Load Library Safely http://blogs.technet.com/b/srd/archive/2014/05/13/load-library-safely.aspx
- See also MS15-020
- See also MS15-069
- See also MS15-132
  Wonder about CVE-2015-6128, mostly it is reported as belonging to MS15-132 but the Acknowledgments-2015 page says MS15-134.
- OLE DB Provider for Oracle multiple DLL side loading vulnerabilities http://seclists.org/fulldisclosure/2015/Dec/64 http://seclists.org/fulldisclosure/2016/Feb/52
  Shockwave Flash Object DLL side loading vulnerability http://seclists.org/fulldisclosure/2015/Dec/63
  Shutdown UX DLL side loading vulnerability http://seclists.org/fulldisclosure/2015/Dec/62
- Remote Exploitation of Microsoft Office DLL Hijacking (MS15-132) via Browsers http://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/january/remote-exploitation-of-microsoft-office-dll-hijacking-ms15-132-via-browsers/
- See also MS16-014 and its KB3126593: ... behavior of searching for DLLs ... in certain scenarios ... will be changed ... the current directory will be skipped ....
  Which scenarios?
- See also MS16-025
- Defense in depth -- the Microsoft way (part 39): vulnerabilities, please meet the bar for security servicing http://www.securityfocus.com/archive/1/537803
- See also MS16-037
- See also MS16-058
- See also MS16-070
- skype installer dll hijacking vulnerability - CVE-2016-5720 http://seclists.org/fulldisclosure/2016/Sep/65
- Triaging a DLL planting vulnerability http://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/
Microsoft Security Advisory (2264072) Elevation of Privilege Using Windows Service Isolation Bypass http://technet.microsoft.com/security/advisory/2264072
Update on the publicly disclosed Win32k.sys EoP Vulnerability http://blogs.technet.com/b/msrc/archive/2010/08/10/update-on-the-publicly-disclosed-win32k-sys-eop-vulnerability.aspx
- Windows Kernel Flaw (August 6, 7 & 9, 2010) http://www.sans.org/newsletters/newsbites/xii/63#308
Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution (2265906) http://technet.microsoft.com/security/bulletin/ms10-060
Vulnerabilities in the Tracing Feature for Services Could Allow an Elevation of Privilege (982799) http://technet.microsoft.com/security/bulletin/ms10-059
Vulnerabilities in TCP/IP could cause Elevation of Privilege (978886) http://technet.microsoft.com/security/bulletin/ms10-058
- MoonSols update on CVE-2010-1893 (Windows 7 TCP/IP Integer Overflow) http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075964.html
Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution (2269707) http://technet.microsoft.com/security/bulletin/ms10-057
- CORE-2010-0407: Microsoft Office Excel PivotTable Cache Data Record Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075957.html
Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (2269638) http://technet.microsoft.com/security/bulletin/ms10-056
- iDefense Security Advisory 08.10.10: Microsoft Word RTF File Parsing Heap Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075961.html
- Microsoft Office Word HTML Linked Objects Memory Corruption Vulnerability - CVE-2010-1903 http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075965.html
- ZDI-10-150: Microsoft Office Word sprmCMajority Record Parsing Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075979.html
- ZDI-10-151: Microsoft Office Word 2007 plcffldMom Parsing Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075988.html
Vulnerability in Cinepak Codec Could Allow Remote Code Execution (982665) http://technet.microsoft.com/security/bulletin/ms10-055
- ZDI-10-148: Microsoft Cinepak Codec CVDecompress Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075952.html
Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214) http://technet.microsoft.com/security/bulletin/ms10-054
- stratsec Security Advisory: SS-2010-007 Microsoft SMB Server Zero Size Pool Allocation http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075962.html
Cumulative Security Update for Internet Explorer (2183461) http://technet.microsoft.com/security/bulletin/ms10-053
- VUPEN Security Research - Microsoft Internet Explorer "boundElements" Property Use-after-free Vulnerability (CVE-2010-2557) Aug 11 2010 12:58AM http://www.securityfocus.com/archive/1/513005
  VUPEN Security Research - Microsoft Internet Explorer "OnPropertyChange_Src()" Use-after-free Vulnerability (CVE-2010-2556) Aug 11 2010 12:54AM http://www.securityfocus.com/archive/1/513007
  VUPEN Security Research - Microsoft Internet Explorer "CIframeElement" Object Use-after-free Vulnerability (CVE-2010-2558) Aug 11 2010 01:01AM http://www.securityfocus.com/archive/1/513008
  VUPEN Security Research - Microsoft Internet Explorer Table Element Use-after-free Vulnerability (CVE-2010-2560) Aug 11 2010 01:04AM http://www.securityfocus.com/archive/1/513009
Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (2115168) http://technet.microsoft.com/security/bulletin/ms10-052
- ZDI-10-147: Microsoft Windows MPEG Layer-3 Audio Decoder Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075951.html
Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2079403) http://technet.microsoft.com/security/bulletin/ms10-051
- Issue 17 - Msxml2.XMLHTTP.3.0 response handling memory corruption (ms10-051, CVE-2010-2561) http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075953.html
Vulnerability in Movie Maker Could Allow Remote Code Execution (981997) http://technet.microsoft.com/security/bulletin/ms10-050
- Secunia Research: Windows Movie Maker String Parsing Buffer Overflow Aug 10 2010 05:17PM http://www.securityfocus.com/archive/1/512980
Vulnerabilities in SChannel could allow Remote Code Execution (980436) http://technet.microsoft.com/security/bulletin/ms10-049
- Microsoft Security Advisory (977377) Vulnerability in TLS/SSL Could Allow Spoofing http://technet.microsoft.com/security/advisory/977377
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2160329) http://technet.microsoft.com/security/bulletin/ms10-048
- [CORE-2010-0623] Microsoft Windows CreateWindow function callback vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-August/075955.html
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (981852) http://technet.microsoft.com/security/bulletin/ms10-047
Vulnerability in Windows Shell Could Allow Remote Code Execution (2286198) http://technet.microsoft.com/security/bulletin/ms10-046
- Microsoft Security Advisory (2286198) Vulnerability in Windows Shell Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2286198
- Vulnerability in Windows "LNK" files? http://isc.sans.edu/forums/diary/9181
- Microsoft Windows Shortcut 'LNK' Files Automatic File Execution Vulnerability http://www.securityfocus.com/bid/41732
- Windows Shortcut Exploit Protection Tool http://www.sophos.com/products/free-tools/sophos-windows-shortcut-exploit-protection-tool.html
- Stuxnet, malicious .LNKs, ...and then there was Sality http://blogs.technet.com/b/mmpc/archive/2010/07/30/stuxnet-malicious-lnks-and-then-there-was-sality.aspx
Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212) http://technet.microsoft.com/security/bulletin/ms10-045
- MS10-045: Microsoft Office Outlook Remote Code Execution vulnerability http://blogs.technet.com/b/srd/archive/2010/07/13/ms10-045-microsoft-office-outlook-remote-code-execution-vulnerability.aspx
- Outlook PR_ATTACH_METHOD file execution vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-July/075631.html
Vulnerabilities in Microsoft Office Access ActiveX Controls Could Allow Remote Code Execution (982335) http://technet.microsoft.com/security/bulletin/ms10-044
- ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-July/075606.html
(W7) Vulnerability in Canonical Display Driver Could Allow Remote Code Execution (2032276) http://technet.microsoft.com/security/bulletin/ms10-043
- Microsoft Security Advisory (2028859) Vulnerability in Canonical Display Driver Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2028859
(WXP) Vulnerability in Help and Support Center Could Allow Remote Code Execution (2229593) http://technet.microsoft.com/security/bulletin/ms10-042
- Microsoft Security Advisory (2219475) Vulnerability in Windows Help and Support Center Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/2219475
- Attacks on the Windows Help and Support Center Vulnerability (CVE-2010-1885) http://blogs.technet.com/b/mmpc/archive/2010/06/30/attacks-on-the-windows-help-and-support-center-vulnerability-cve-2010-1885.aspx
- Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly http://lists.grok.org.uk/pipermail/full-disclosure/2010-June/074986.html http://lists.grok.org.uk/pipermail/full-disclosure/2010-June/075007.html
- Real Player 0day for WinXP http://lists.grok.org.uk/pipermail/full-disclosure/2010-July/075550.html
Microsoft Security Advisory (980088) Vulnerability in Internet Explorer Could Allow Information Disclosure http://technet.microsoft.com/security/advisory/980088
- CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities http://lists.grok.org.uk/pipermail/full-disclosure/2010-February/072877.html
Vulnerability in Microsoft .NET Framework Could Allow Tampering (981343) http://technet.microsoft.com/security/bulletin/ms10-041
Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452) http://technet.microsoft.com/security/bulletin/ms10-038
- ZDI-10-103: Microsoft Office Excel DBQueryExt Record Unspecified ADO Object Remote Code Execution http://lists.grok.org.uk/pipermail/full-disclosure/2010-June/074950.html
  ZDI-10-104: Microsoft Office Excel SxView Record Parsing Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-June/074951.html
Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Elevation of Privilege (980218) http://technet.microsoft.com/security/bulletin/ms10-037
Vulnerability in COM validation in Microsoft Office Could Allow Remote Code Execution (983235) http://technet.microsoft.com/security/bulletin/ms10-036
Cumulative Security Update for Internet Explorer (982381) http://technet.microsoft.com/security/bulletin/ms10-035
- ZDI-10-102: Microsoft Internet Explorer Stylesheet Array Removal Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-June/074949.html
Cumulative Security Update of ActiveX Kill Bits (980195) http://technet.microsoft.com/security/bulletin/ms10-034
Vulnerabilities in Media Decompression Could Allow Remote Code Execution (979902) http://technet.microsoft.com/security/bulletin/ms10-033
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (979559) http://technet.microsoft.com/security/bulletin/ms10-032
Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (978213) http://technet.microsoft.com/security/bulletin/ms10-031
- MS10-031: VBE6 Single-Byte Stack Overwrite http://blogs.technet.com/srd/archive/2010/05/11/ms10-031-vbe6-single-byte-stack-overwrite.aspx ... we feel that consistent exploit code resulting in arbitrary code execution is not likely to be released within the next 30 days - is that a challenge?
Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542) http://technet.microsoft.com/security/bulletin/ms10-030
- {PRL} Microsoft Windows Outlook Express and Windows Mail Integer Overflow http://www.securityfocus.com/archive/1/511227
Vulnerability in Windows ISATAP Component Could Allow Spoofing (978338) http://technet.microsoft.com/security/bulletin/ms10-029
Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (980094) http://technet.microsoft.com/security/bulletin/ms10-028
- [CORE-2010-0428] Microsoft Office Visio DXF File Insertion Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2010-May/074421.html
Vulnerability in Windows Media Player Could Allow Remote Code Execution (979402) http://technet.microsoft.com/security/bulletin/ms10-027
- ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074090.html
Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (977816) http://technet.microsoft.com/security/bulletin/ms10-026
Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832) http://technet.microsoft.com/security/bulletin/ms10-024
Re-released 14 Jul 10.
- [CORE-2010-0427] Windows SMTP Service DNS query Id vulnerabilities http://lists.grok.org.uk/pipermail/full-disclosure/2010-May/074429.html
Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160) http://technet.microsoft.com/security/bulletin/ms10-023
- ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074089.html
Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (981169) http://technet.microsoft.com/security/bulletin/ms10-022
- Microsoft Security Advisory (981169) Vulnerability in VBScript Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/981169
- WinXP IE .HLP file 0day http://lists.grok.org.uk/pipermail/full-disclosure/2010-February/073317.html
Vulnerabilities in Windows Kernel could allow Elevation of Privilege (979683) http://technet.microsoft.com/security/bulletin/ms10-021
Vulnerabilities in SMB Client Could Allow Remote Code Execution (980232) http://technet.microsoft.com/security/bulletin/ms10-020
- Microsoft Security Advisory (977544) Vulnerabilities in SMB Could Allow Denial of Service http://technet.microsoft.com/security/advisory/977544
- Windows 7 , Server 2008R2 Remote Kernel Crash http://lists.grok.org.uk/pipermail/full-disclosure/2009-November/071448.html
- stratsec Security Advisory: SS-2010-004 Microsoft SMB Client Kernel Stack Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074116.html
- Turning SMB client side bug to server side http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074131.html
Vulnerabilities in Windows Could Allow Remote Code Execution (981210) http://technet.microsoft.com/security/bulletin/ms10-019
Microsoft Security Bulletin MS10-018 - Critical: Cumulative Security Update for Internet Explorer (980182) http://technet.microsoft.com/security/bulletin/ms10-018
- Microsoft Security Advisory (981374) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/981374
- Security Bulletin MS10-018 Released http://blogs.technet.com/msrc/archive/2010/03/30/security-bulletin-ms10-018-released.aspx
  ... vulnerability used in the "pwn2own" contest at CanSecWest ... still investigating ...
  - iPhone, IE, Firefox, Safari get stomped at hacker contest http://www.theregister.co.uk/2010/03/25/pwn2own_2010_day_one/
    Pwn2Own 2010 Windows 7 Internet Explorer 8 exploit http://vreugdenhilresearch.nl/Pwn2Own-2010-Windows7-InternetExplorer8.pdf
- iDefense Security Advisory 03.30.10: Microsoft Internet Explorer 'onreadystatechange' Use After Free Vulnerability http://www.securityfocus.com/archive/1/510420
- ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/073931.html
  ZDI-10-034: Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/073932.html
- Guidance on Internet Explorer XSS Filter http://blogs.technet.com/msrc/archive/2010/04/19/guidance-on-internet-explorer-xss-filter.aspx
  Distressing how long it takes to fix issues...
Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (980150) http://technet.microsoft.com/security/bulletin/ms10-017
- ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073518.html
- CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073524.html
- iDefense Security Advisory 03.09.10: Microsoft Excel Sheet Object Type Confusion Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073527.html
  iDefense Security Advisory 03.09.10: Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073528.html
  iDefense Security Advisory 03.09.10: Microsoft Excel MDXSET Record Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073529.html
  iDefense Security Advisory 03.09.10: Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073530.html
Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561) http://technet.microsoft.com/security/bulletin/ms10-016
Re-released 3 May 10.
- CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073523.html
- Update on MS10-016 for Microsoft Producer http://blogs.technet.com/msrc/archive/2010/05/03/update-on-ms10-016-for-microsoft-producer.aspx
Vulnerabilities in Windows Kernel could allow Elevation of Privilege (977165) http://technet.microsoft.com/security/bulletin/ms10-015
- Restart issues after installing MS10-015 http://blogs.technet.com/msrc/archive/2010/02/11/restart-issues-after-installing-ms10-015.aspx http://blogs.technet.com/msrc/archive/2010/02/12/update-restart-issues-after-installing-ms10-015.aspx http://blogs.technet.com/msrc/archive/2010/02/17/update-restart-issues-after-installing-ms10-015-and-the-alureon-rootkit.aspx
- Microsoft Security Advisory (979682) Vulnerability in Windows Kernel Could Allow Elevation of Privilege http://technet.microsoft.com/security/advisory/979682
- Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack http://lists.grok.org.uk/pipermail/full-disclosure/2010-January/072549.html
Vulnerability in Kerberos Could Allow Denial of Service (977290) http://technet.microsoft.com/security/bulletin/ms10-014
Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (977935) http://technet.microsoft.com/security/bulletin/ms10-013
- ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-February/072994.html
Vulnerabilities in SMB Server Could Allow Remote Code Execution (971468) http://technet.microsoft.com/security/bulletin/ms10-012
- Windows SMB NTLM Authentication Weak Nonce Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-February/073004.html
Vulnerabilities in Windows Client/Server Run-time Subsystem (CSRSS) Could Allow Elevation of Privilege (978037) http://technet.microsoft.com/security/bulletin/ms10-011
Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (974145) http://technet.microsoft.com/security/bulletin/ms10-009
Cumulative Security Update of ActiveX Kill Bits (978262) http://technet.microsoft.com/security/bulletin/ms10-008
Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713) http://technet.microsoft.com/security/bulletin/ms10-007
- ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-February/072995.html
- Insomnia : ISVA-100216.1 - Windows URL Handling Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-February/073145.html
Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251) http://technet.microsoft.com/security/bulletin/ms10-006
- stratsec Security Advisory SS-2010-003 - Microsoft SMB Client Pool Overflow http://www.securityfocus.com/archive/1/509480
Vulnerability in Microsoft Paint Could Allow Remote Code Execution (978706) http://technet.microsoft.com/security/bulletin/ms10-005
Vulnerabilities in Microsoft Office PowerPoint could allow Remote Code Execution (975416) http://technet.microsoft.com/security/bulletin/ms10-004
- Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow http://www.securityfocus.com/archive/1/509466
- ZDI-10-017: Microsoft Office PowerPoint Viewer TextBytesAtom Record Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-February/072996.html
- TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-February/072998.html
Vulnerability in Microsoft Office (MSO) Could Allow Remote Code Execution (978214) http://technet.microsoft.com/security/bulletin/ms10-003
- CORE-2009-0827: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-February/072993.html
Cumulative Security Update for Internet Explorer (978207) http://technet.microsoft.com/security/bulletin/ms10-002
- Microsoft Security Advisory (979352) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/979352
- Assessing risk of IE 0day vulnerability http://blogs.technet.com/srd/archive/2010/01/15/assessing-risk-of-ie-0day-vulnerability.aspx
  Additional information about DEP and the Internet Explorer 0day vulnerability http://blogs.technet.com/srd/archive/2010/01/18/additional-information-about-dep-and-the-internet-explorer-0day-vulnerability.aspx
  Reports of DEP being bypassed http://blogs.technet.com/srd/archive/2010/01/20/reports-of-dep-being-bypassed.aspx
  ... but (1/256 + 1/255 + 1/254) is a little over 1% ... and anyway:
  - Bypassing Windows Hardware-enforced Data Execution Prevention http://uninformed.org/index.cgi?v=2&a=4
  - Bypassing Hardware based Data Execution Prevention (DEP) on Windows 2003 Service Pack 2 http://content.securestate.com/cdn-cwp/Bypassing_Hardware_based_Data_Execution_Prevention.pdf
  - DEP bypass with SetProcessDEPPolicy() http://bernardodamele.blogspot.com/2009/12/dep-bypass-with-setprocessdeppolicy.html
  - Internet Exploiter 2 - bypassing DEP http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073354.html http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073387.html
  - Clever DEP Trick http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073903.html
- IExplorer 0day CVE-2010-0249 - Exploit-Comele / Hydraq / Aurora http://extraexploit.blogspot.com/2010/01/iexplorer-0day-cve-2010-0249.html
- Code to mitigate IE event zero-day (CVE-2010-0249) http://www.securityfocus.com/archive/1/508961
- ZDI-10-011: Microsoft Internet Explorer Table Layout Col Tag Cache Update Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-January/072625.html
  ZDI-10-012: Microsoft Internet Explorer Baseline Tag Rendering Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-January/072626.html
  ZDI-10-013: Microsoft Internet Explorer Table Layout Reuse Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-January/072627.html
  ZDI-10-014: Microsoft Internet Explorer item Object Memory Corruption Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-January/072628.html
- Major IE8 flaw makes 'safe' sites unsafe - Microsoft's XSS buster busted http://www.theregister.co.uk/2009/11/20/internet_explorer_security_flaw/
  IE's XSS Filter Creates XSS Vulnerabilities http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/
- IE8 XSS Filter bypasses http://www.ethicalhack3r.co.uk/2009/11/20/ie8-xss-filter-bypass/
  Is this fixed also??
Microsoft Security Advisory (979267) Vulnerabilities in Adobe Flash Player 6 Provided in Windows XP Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/979267
Secunia Research: Microsoft Windows Flash Player Movie Unloading Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2010-January/072419.html
Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution (972270) http://technet.microsoft.com/security/bulletin/ms10-001
Microsoft Security Advisory (974926) Credential Relaying Attacks on Integrated Windows Authentication http://technet.microsoft.com/security/advisory/974926
Microsoft Security Advisory (954157) Security Enhancements for the Indeo Codec http://technet.microsoft.com/security/advisory/954157
- ZDI-09-089: Microsoft Windows Intel Indeo Codec Parsing Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/071889.html
- ZDI-09-090: Microsoft Windows Intel Indeo Codec Parsing Stack Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/071890.html
- iDefense Security Advisory 12.08.09: Microsoft Windows Indeo32 Codec Parsing Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/071921.html
Vulnerability in Microsoft Office Project Could Allow Remote Code Execution (967183) http://technet.microsoft.com/security/bulletin/ms09-074
Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (975539) http://technet.microsoft.com/security/bulletin/ms09-073
- iDefense Security Advisory 12.08.09: Microsoft WordPad Word97 Converter Integer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/071920.html
Cumulative Security Update for Internet Explorer (974455) http://technet.microsoft.com/security/bulletin/ms09-072
- Microsoft Security Advisory (977981) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/977981
- Code to mitigate IE STYLE zero-day http://www.securityfocus.com/archive/1/508006
- Some more details on IE STYLE zero-day http://www.securityfocus.com/archive/1/508122
- ZDI-09-086: Microsoft Internet Explorer XHTML DOM Manipulation Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/071886.html
- ZDI-09-087: Microsoft Internet Explorer CSS Race Condition Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/071887.html
- ZDI-09-088: Microsoft Internet Explorer IFrame Attributes Circular Reference Dangling Pointer Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/071888.html
- iDefense Security Advisory 12.08.09: Microsoft Internet Explorer HTML Layout Engine Uninitialized Memory Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/071919.html
Vulnerability on Internet Authentication Service Could Allow Remote Code Execution (974318) http://technet.microsoft.com/security/bulletin/ms09-071
Vulnerability in Local Security Subsystem Authority Service Could Allow Denial of Service (974392) http://technet.microsoft.com/security/bulletin/ms09-069
Vulnerability in Microsoft Office Word Could Allow Remote Code Execution (976307) http://technet.microsoft.com/security/bulletin/ms09-068
- iDefense Security Advisory 11.10.09: Microsoft Word FIB Processing Stack Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-November/071443.html
Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (972652) http://technet.microsoft.com/security/bulletin/ms09-067
- ZDI-09-082: Microsoft Office Excel PivotTable Cache Record Parsing Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-November/071441.html
- ZDI-09-083: Microsoft Excel Shared Feature Header Pointer Offset Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-November/071442.html
- iDefense Security Advisory 11.10.09: Microsoft Excel FEATHEADER Record Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-November/071444.html
- VUPEN Security Research - Microsoft Office Excel Code Execution Vulnerabilities http://www.securityfocus.com/archive/1/507823
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (969947) http://technet.microsoft.com/security/bulletin/ms09-065
(W2k) Vulnerability in License Logging Server Could Allow Remote Code Execution (974783) http://technet.microsoft.com/security/bulletin/ms09-064
- TPTI-09-07: Microsoft Windows License Logging Service Heap Corruption Vulnerability http://www.securityfocus.com/archive/1/507796
(Vista) Vulnerability in Web Service on Devices Could Allow Remote Code Execution (973565) http://technet.microsoft.com/security/bulletin/ms09-063
Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488) http://technet.microsoft.com/security/bulletin/ms09-062
- ZDI-09-072: Microsoft Windows GDI+ TIFF Parsing Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-October/071149.html
- iDefense Security Advisory 10.13.09: Microsoft Windows GDI+ TIFF File Parsing Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-October/071151.html
- iDefense Security Advisory 10.13.09: Microsoft Office Drawing Format Shape Properties Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-October/071152.html
Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378) http://technet.microsoft.com/security/bulletin/ms09-061
Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution (973965) http://technet.microsoft.com/security/bulletin/ms09-060
Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (975467) http://technet.microsoft.com/security/bulletin/ms09-059
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (971486) http://technet.microsoft.com/security/bulletin/ms09-058
Vulnerability in Indexing Service Could Allow Remote Code Execution (969059) http://technet.microsoft.com/security/bulletin/ms09-057
Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571) http://technet.microsoft.com/security/bulletin/ms09-056
Cumulative Security Update of ActiveX Kill Bits (973525) http://technet.microsoft.com/security/bulletin/ms09-055
Cumulative Security Update for Internet Explorer (974455) http://technet.microsoft.com/security/bulletin/ms09-054
Re-released 2 Nov 09.
- MSIE Content-Encoding: deflate memory corruption vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-October/071144.html
- ZDI-09-070: Microsoft Internet Explorer Event Object Type Double-Free Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-October/071147.html
- ZDI-09-071: Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-October/071148.html
Vulnerability in Windows Media Player Could Allow Remote Code Execution (974112) http://technet.microsoft.com/security/bulletin/ms09-052
Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (975682) http://technet.microsoft.com/security/bulletin/ms09-051
- ZDI-09-069: Microsoft Windows Media Player Audio Voice Sample Rate Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-October/071146.html
Vulnerabilities in SMBv2 Could Allow Remote Code Execution (975517) http://technet.microsoft.com/security/bulletin/ms09-050
- Microsoft Security Advisory (975497) Vulnerabilities in SMB Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/975497
- Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. http://lists.grok.org.uk/pipermail/full-disclosure/2009-September/070568.html http://lists.grok.org.uk/pipermail/full-disclosure/2009-September/070613.html
- Regarding Microsoft srv2.sys SMB2.0 NEGOTIATE BSOD http://www.securityfocus.com/archive/1/506300
- Vista/2008/Windows 7 SMB2 BSOD 0Day http://isc.sans.edu/forums/diary/7093
- Update on the SMB vulnerability situation http://blogs.technet.com/srd/archive/2009/09/18/update-on-the-smb-vulnerability.aspx
Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710) http://technet.microsoft.com/security/bulletin/ms09-049
Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (967723) http://technet.microsoft.com/security/bulletin/ms09-048
Updated 9 Sep 09 (WinXP is vulnerable, but no patch...)
Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812) http://technet.microsoft.com/security/bulletin/ms09-047
Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844) http://technet.microsoft.com/security/bulletin/ms09-046
Vulnerability in JScript Scripting Engine Could Allow Remote Code Execution (971961) http://technet.microsoft.com/security/bulletin/ms09-045
- ZDI-09-062: Microsoft Internet Explorer JScript arguments Invocation Memory Corruption Vulnerability http://www.securityfocus.com/archive/1/506302
Microsoft Security Advisory (967940) Update for Windows Autorun http://technet.microsoft.com/security/advisory/967940
Updated 25 Aug 09. But, cannot viruses set USB sticks to pretend to have a CD partition?
Updated 8 Feb 11:
- Deeper insight into the Security Advisory 967940 update http://blogs.technet.com/b/msrc/archive/2011/02/08/deeper-insight-into-the-security-advisory-967940-update.aspx
Updated 22 Feb 11, to automatically install; still they pretend this is a non-security update.
Microsoft Security Advisory (973811) Extended Protection for Authentication http://technet.microsoft.com/security/advisory/973811
Updated 8 Jan 13 (and many times previous).
Funny: on 14Dec10 it was announced that Outlook could opt in, but removed on 17Dec10; re-added 12 Apr 11.
Used to say Internet Explorer will never send credentials [to] Internet zone: are credentials easily stolen from intranet servers?
Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (970927) http://technet.microsoft.com/security/bulletin/ms09-044
- ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070186.html
Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (957638) http://technet.microsoft.com/security/bulletin/ms09-043
- ZDI-09-054: Microsoft Office OWC10.Spreadsheet ActiveX msDataSourceObject() Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070183.html
  ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070184.html
  ZDI-09-056: Microsoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070185.html
- iDefense Security Advisory 08.11.09: Microsoft Office Web Components 2000 Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070285.html
Vulnerability in Telnet Could Allow Remote Code Execution (960859) http://technet.microsoft.com/security/bulletin/ms09-042
Vulnerability in Workstation Service Could Allow Elevation of Privilege (971657) http://technet.microsoft.com/security/bulletin/ms09-041
- TPTI-09-06: Microsoft Windows Workstation Service NetrGetJoinInformation Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070181.html
Vulnerability in Message Queuing Could Allow Elevation of Privilege (971032) http://technet.microsoft.com/security/bulletin/ms09-040
Vulnerabilities in WINS Could Allow Remote Code Execution (969883) http://technet.microsoft.com/security/bulletin/ms09-039
- ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070182.html
Vulnerabilities in Windows Media File Processing Could Allow Remote Code Execution (971557) http://technet.microsoft.com/security/bulletin/ms09-038
Vulnerabilities in Microsoft Active Template Library (ATL) Could Allow Remote Code Execution (973908) http://technet.microsoft.com/security/bulletin/ms09-037
Re-released 8 Sep 09.
Vulnerability in ASP.NET in Microsoft Windows Could Allow Denial of Service (970957) http://technet.microsoft.com/security/bulletin/ms09-036
Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution (969706) http://technet.microsoft.com/security/bulletin/ms09-035
- Microsoft Security Advisory (973882) Vulnerabilities in Microsoft Active Template Library (ATL) Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/973882
Cumulative Security Update for Internet Explorer (972260) http://technet.microsoft.com/security/bulletin/ms09-034
- ZDI-09-047: Microsoft Internet Explorer getElementsByTagName Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070063.html
  ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070064.html
- iDefense Security Advisory 08.06.09: Microsoft Internet Explorer HTML TIME 'ondatasetcomplete' Use After Free Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070075.html
Vulnerability in Virtual PC and Virtual Server could lead to Elevation of Privilege (969856) http://technet.microsoft.com/security/bulletin/ms09-033
Cumulative Security Update of ActiveX Kill Bits (973346) http://technet.microsoft.com/security/bulletin/ms09-032
Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (969516) http://technet.microsoft.com/security/bulletin/ms09-030
- iDefense Security Advisory 07.15.09: Microsoft Office Publisher 2007 Arbitrary Pointer Dereference Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069666.html
Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution (961371) http://technet.microsoft.com/security/bulletin/ms09-029
- iDefense Security Advisory 07.15.09: Microsoft Embedded OpenType Font Engine (T2EMBED.DLL) Heap Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069651.html
Microsoft Security Advisory (969898) Update Rollup for ActiveX Kill Bits http://technet.microsoft.com/security/advisory/969898
Vulnerabilities in Microsoft DirectShow Could Allow Remote Code Execution (971633) http://technet.microsoft.com/security/bulletin/ms09-028
- ZDI-09-045: Microsoft DirectShow Quicktime Atom Parsing Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069633.html
Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (969514) http://technet.microsoft.com/security/bulletin/ms09-027
- ZDI-09-035: Microsoft Word Document Stack Based Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069277.html
- TPTI-09-05: Microsoft DirectShow QuickTime Atom Parsing Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069634.html
Vulnerability in RPC Could Allow Elevation of Privilege (970238) http://technet.microsoft.com/security/bulletin/ms09-026
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537) http://technet.microsoft.com/security/bulletin/ms09-025
Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution (957632) http://technet.microsoft.com/security/bulletin/ms09-024
Vulnerability in Windows Search Could Allow Information Disclosure (963093) http://technet.microsoft.com/security/bulletin/ms09-023
Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution (961501) http://technet.microsoft.com/security/bulletin/ms09-022
- iDefense Security Advisory 06.11.09: Microsoft Windows 2000 Print Spooler Remote Stack Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069304.html
Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462) http://technet.microsoft.com/security/bulletin/ms09-021
- Secunia Research: Microsoft Excel Record Parsing Array Indexing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069265.html
- Secunia Research: Microsoft Excel String Parsing Integer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069266.html
- ZDI-09-040: Microsoft Office Excel QSIR Record Pointer Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069281.html
- iDefense Security Advisory 06.11.09: Microsoft Excel SST Record Integer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069303.html
Cumulative Security Update for Internet Explorer (969897) http://technet.microsoft.com/security/bulletin/ms09-019
- CORE-2008-0826 - Internet Explorer Security Zone restrictions bypass http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069262.html
- FortiGuard Advisory: Microsoft Internet Explorer DHTML Handling Remote Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069271.html
- ZDI-09-036: Microsoft Internet Explorer setCapture Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069276.html
  ZDI-09-037: Microsoft Internet Explorer Concurrent Ajax Request Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069278.html
  ZDI-09-038: Microsoft Internet Explorer Event Handler Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069279.html
  ZDI-09-039: Microsoft Internet Explorer onreadystatechange Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069280.html
  ZDI-09-041: Microsoft Internet Explorer 8 Rows Property Dangling Pointer Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-June/069282.html
Vulnerabilities in Active Directory Could Allow Remote Code Execution (971055) http://technet.microsoft.com/security/bulletin/ms09-018
Vulnerabilities in Microsoft Office Powerpoint Could Allow Remote Code Execution (967340) http://technet.microsoft.com/security/bulletin/ms09-017
- Microsoft Security Advisory (969136) Vulnerability in Microsoft Office PowerPoint Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/969136
- Secunia Research: Microsoft PowerPoint Atom Parsing Buffer Overflows http://www.securityfocus.com/archive/1/503451
- ZDI-09-019: Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability http://www.securityfocus.com/archive/1/503453
- ZDI-09-020: Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability http://www.securityfocus.com/archive/1/503454
- iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Stack Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-May/068990.html
  iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-May/068991.html
  iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Stack Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2009-May/068992.html
  iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT 4.0 Importer Multiple Stack Buffer Overflow Vulnerabilities http://lists.grok.org.uk/pipermail/full-disclosure/2009-May/068993.html
  iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT95 Import Multiple Stack Buffer Overflow Vulnerabilities http://lists.grok.org.uk/pipermail/full-disclosure/2009-May/068995.html
  iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT95 Import Multiple Stack Buffer Overflow Vulnerabilities http://lists.grok.org.uk/pipermail/full-disclosure/2009-May/068996.html
  iDefense Security Advisory 05.12.09: Microsoft PowerPoint Build List Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-May/068999.html
  iDefense Security Advisory 05.12.09: Microsoft PowerPoint Notes Container Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-May/069000.html
  iDefense Security Advisory 05.12.09: Microsoft PowerPoint Integer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-May/069001.html
Note that ms09-017 removes support for old PP40 format.
Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426) http://technet.microsoft.com/security/bulletin/ms09-015
- Microsoft Security Advisory (953818) Blended Threat from Combined Attack Using Apple's Safari on the Windows Platform http://technet.microsoft.com/security/advisory/953818
  Updated 20 Jun 08 with
  About the security content of Safari 3.1.2 for Windows http://support.apple.com/kb/HT2092
  and that reportedly solves things...
  See MS09-014 also
- Microsoft Security advisory for Safari and Windows http://isc.sans.edu/forums/diary/4495
- Safari Carpet Bomb http://www.oreillynet.com/onlamp/blog/2008/05/safari_carpet_bomb.html
- Safari pwns Internet Explorer http://aviv.raffon.net/2008/05/31/SafariPwnsInternetExplorer.aspx
Cumulative Security Update for Internet Explorer (963027) http://technet.microsoft.com/security/bulletin/ms09-014
Vulnerabilities in Windows HTTP Services Could Allow Remote Code Execution (960803) http://technet.microsoft.com/security/bulletin/ms09-013
Vulnerabilities in Windows Could Allow Elevation of Privilege (959454) http://technet.microsoft.com/security/bulletin/ms09-012
- Microsoft Security Advisory (951306) Vulnerability in Windows Could Allow Elevation of Privilege http://technet.microsoft.com/security/advisory/951306
- Token Kidnapping (Microsoft Security Advisory 951306) presentation available http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061634.html
- Token Kidnapping Windows 2003 PoC exploit http://www.securityfocus.com/archive/1/497168
Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (961373) http://technet.microsoft.com/security/bulletin/ms09-011
Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477) http://technet.microsoft.com/security/bulletin/ms09-010
- Microsoft Security Advisory (960906) Vulnerability in WordPad Text Converter Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/960906
- iDefense Security Advisory 04.14.09: Microsoft Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068700.html
Vulnerabilities in Microsoft Office Excel Could Cause Remote Code Execution (968557) http://technet.microsoft.com/security/bulletin/ms09-009
- Microsoft Security Advisory (968272) Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/968272
Vulnerability in SChannel Could Allow Spoofing (960225) http://technet.microsoft.com/security/bulletin/ms09-007
Vulnerabilities in Windows Kernel Could Allow Remote Code Execution (958690) http://technet.microsoft.com/security/bulletin/ms09-006
Behavior of ActiveX controls embedded in Office documents http://blogs.technet.com/srd/archive/2009/03/03/behavior-of-activex-controls-embedded-in-office-documents.aspx
Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634) http://technet.microsoft.com/security/bulletin/ms09-005
Cumulative Security Update for Internet Explorer (961260) http://technet.microsoft.com/security/bulletin/ms09-002
Microsoft Security Advisory (960715) Update Rollup for ActiveX Kill Bits http://technet.microsoft.com/security/advisory/960715
Microsoft Security Bulletin MS09-001 - Critical - Vulnerabilities in SMB Could Allow Remote Code Execution (958687) http://technet.microsoft.com/security/bulletin/ms09-001
Microsoft Security Bulletin MS08-078 - Critical Security Update for Internet Explorer (960714) http://technet.microsoft.com/security/bulletin/ms08-078
- Microsoft Security Advisory (961051) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/961051
- http://blogs.technet.com/swi/archive/2008/12/12/Clarification-on-the-various-workarounds-from-the-recent-IE-advisory.aspx
- http://blogs.msdn.com/sdl/archive/2008/12/18/ms08-078-and-the-sdl.aspx
- 0-day exploit for Internet Explorer in the wild http://isc.sans.edu/forums/diary/5458
  MSIE 0-day Spreading Via SQL Injection http://isc.sans.edu/forums/diary/5464
  IE7 0day expanded to include IE6 and IE8(beta) http://isc.sans.edu/forums/diary/5470
  XML data Island workaround may affect clients wth exchange 2003 outlook web access http://isc.sans.edu/forums/diary/5503
- MS Internet Explorer XML Parsing Remote Buffer Overflow Exploit 0day http://milw0rm.com/exploits/7403
  MS Internet Explorer XML Parsing Buffer Overflow Exploit (vista) 0day http://milw0rm.com/exploits/7410
Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807) http://technet.microsoft.com/security/bulletin/ms08-076
Vulnerabilities in Windows Search Could Allow Remote Code Execution (959349) http://technet.microsoft.com/security/bulletin/ms08-075
Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (959070) http://technet.microsoft.com/security/bulletin/ms08-074
Updated 28 Jan 09.
Cumulative Security Update for Internet Explorer (958215) http://technet.microsoft.com/security/bulletin/ms08-073
Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution(957173) http://technet.microsoft.com/security/bulletin/ms08-072
Vulnerabilities in GDI Could Allow Remote Code Execution(956802) http://technet.microsoft.com/security/bulletin/ms08-071
Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) Could Allow Remote Code Execution(932349) http://technet.microsoft.com/security/bulletin/ms08-070
Microsoft Security Advisory (953839) Cumulative Security Update of ActiveX Kill Bits http://technet.microsoft.com/security/advisory/953839
Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218) http://technet.microsoft.com/security/bulletin/ms08-069
Re-released 13 Oct 09.
Vulnerability in SMB Could Allow Remote Code Execution (957097) http://technet.microsoft.com/security/bulletin/ms08-068
- MS08-068 and SMBRelay http://blogs.technet.com/msrc/archive/2008/11/11/ms08-068-and-smbrelay.aspx
- http://en.wikipedia.org/wiki/SMBRelay
- The SMB Man-In-the-Middle Attack http://www.xfocus.net/articles/200305/smbrelay.html
- SmbRelay captures NTLM hashes http://www.windowsnetworking.com/kbase/WindowsTips/WindowsXP/AdminTips/Network/SmbRelaycapturesNTLMhashes.html
- MS08-068: Metasploit and SMB Relay http://blog.metasploit.com/2008/11/ms08-067-metasploit-and-smb-relay.html
- NTLM Multiprotocol Replay attacks http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065641.html http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065651.html
Vulnerability in Server Service Could Allow Remote Code Execution (958644) http://technet.microsoft.com/security/bulletin/ms08-067
- The Inside Story Behind MS08-067 http://blogs.technet.com/b/johnla/archive/2015/09/26/the-inside-story-behind-ms08-067.aspx
Microsoft Security Advisory (956391) Cumulative Security Update of ActiveX Kill Bits http://technet.microsoft.com/security/advisory/956391
Updated 12 Nov 08.
Vulnerability in the Microsoft Ancillary Function Driver Could Allow Elevation of Privilege (956803) http://technet.microsoft.com/security/bulletin/ms08-066
- Exploit for MS08-066 - AFD.sys kernel memory overwrite. http://www.securityfocus.com/archive/1/497375
Vulnerability in Message Queuing Could Allow Remote Code Execution (951071) http://technet.microsoft.com/security/bulletin/ms08-065
- TPTI-08-07: Microsoft Windows Message Queuing Service Heap Overflow and Memory Disclosure Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/065080.html
Vulnerability in Virtual Address Descriptor Manipulation Could Allow Elevation of Privilege (956841) http://technet.microsoft.com/security/bulletin/ms08-064
Vulnerability in SMB Could Allow Remote Code Execution (957095) http://technet.microsoft.com/security/bulletin/ms08-063
Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution (953155) http://technet.microsoft.com/security/bulletin/ms08-062
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (954211) http://technet.microsoft.com/security/bulletin/ms08-061
Cumulative Security Update for Internet Explorer (956390) http://technet.microsoft.com/security/bulletin/ms08-058
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (956416) http://technet.microsoft.com/security/bulletin/ms08-057
- iDefense Security Advisory 10.14.08: Microsoft Visual Basic for Applications - Multiple Vulnerabilities http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/065078.html
Vulnerability in Microsoft Office Could Allow Information Disclosure (957699) http://technet.microsoft.com/security/bulletin/ms08-056
Vulnerability in Microsoft Office Could Allow Remote Code Execution (955047) http://technet.microsoft.com/security/bulletin/ms08-055
- Insomnia : ISVA-080910.1 - MS Office OneNote URL Handling Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064335.html
Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154) http://technet.microsoft.com/security/bulletin/ms08-054
Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution (954156) http://technet.microsoft.com/security/bulletin/ms08-053
Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593) http://technet.microsoft.com/security/bulletin/ms08-052
- Assurent VR - Microsoft Windows Graphics Rendering Engine WMF Parsing Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064334.html
- ZDI-08-055: Microsoft Windows GDI+ BMP Parsing Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064320.html
  ZDI-08-056: Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064319.html
- iDefense Security Advisory 09.09.08: Microsoft Windows GDI+ Gradient Fill Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064328.html
Microsoft Security Advisory (953839) Cumulative Security Update of ActiveX Kill Bits http://technet.microsoft.com/security/advisory/953839
Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (949785) http://technet.microsoft.com/security/bulletin/ms08-051
- iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Out of Bounds Array Index Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063883.html
- iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Cstring Integer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063884.html
Vulnerability in Windows Messenger Could Allow Information Disclosure (955702) http://technet.microsoft.com/security/bulletin/ms08-050
- Microsoft Windows Messenger Remote Illegal Access Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063903.html
Vulnerability in Event System Could Allow Remote Code Execution (950974) http://technet.microsoft.com/security/bulletin/ms08-049
Security Update for Outlook Express and Windows Mail (951066) http://technet.microsoft.com/security/bulletin/ms08-048
- CORE-2008-0103: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass http://www.securityfocus.com/archive/1/495458
Vulnerability in IPsec Policy Processing Could Allow Information Disclosure (953733) http://technet.microsoft.com/security/bulletin/ms08-047
Vulnerability in Microsoft Windows Image Color Management System Could Allow Remote Code Execution (952954) http://technet.microsoft.com/security/bulletin/ms08-046
- iDefense Security Advisory 08.12.08: Microsoft Windows Color Management Module Heap Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063887.html
Cumulative Security Update for Internet Explorer (953838) http://technet.microsoft.com/security/bulletin/ms08-045
- ZDI-08-050: Microsoft Internet Explorer XHTML Rendering Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063876.html
- ZDI-08-051: Microsoft Internet Explorer Table Layout Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063877.html
Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (924090) http://technet.microsoft.com/security/bulletin/ms08-044
- ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063875.html
- iDefense Security Advisory 08.12.08: Microsoft Office BMP Input Filter Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063879.html
- iDefense Security Advisory 08.12.08: Microsoft Office WPG Image File Heap Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063882.html
- iDefense Security Advisory 08.12.08: Microsoft Excel FORMAT Record Invalid Array Index Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063886.html
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (954066) http://technet.microsoft.com/security/bulletin/ms08-043
- ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063874.html
- iDefense Security Advisory 08.12.08: Microsoft Excel Chart AxesSet Invalid Array Index Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063885.html
Vulnerability in Microsoft Word Could Allow Remote Code Execution (955048) http://technet.microsoft.com/security/bulletin/ms08-042
- Microsoft Security Advisory (953635) Vulnerability in Microsoft Word Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/953635
Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617) http://technet.microsoft.com/security/bulletin/ms08-041
Vulnerability in Windows Explorer Could Allow Remote Code Execution (950582) http://technet.microsoft.com/security/bulletin/ms08-038
Vulnerabilities in DNS Could Allow Spoofing (953230) http://technet.microsoft.com/security/bulletin/ms08-037
Re-released 8 Dec 09.
Revised 10 Jul 08 with ZoneAlarm and CheckPoint info.
See also:
- DNS and NAT (was: DNS and CheckPoint) http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063165.html http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063168.html
- Critical DNS Flaw - Have You Fixed It? http://www.sans.org/newsletters/newsbites/x/54#200
Microsoft Security Advisory (955179) Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/955179
Microsoft Security Advisory (954960) Microsoft Windows Server Update Services (WSUS) Blocked from Deploying Security Updates http://technet.microsoft.com/security/advisory/954960
Microsoft Security Advisory (954474) System Center Configuration Manager 2007 Blocked from Deploying Security Updates http://technet.microsoft.com/security/advisory/954474
Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762) http://technet.microsoft.com/security/bulletin/ms08-036
Vulnerability in Active Directory Could Allow Denial of Service (953235) http://technet.microsoft.com/security/bulletin/ms08-035
Vulnerability in WINS Could Allow Elevation of Privilege (948745) http://technet.microsoft.com/security/bulletin/ms08-034
Vulnerabilities in DirectX Could Allow Remote Code Execution (951698) http://technet.microsoft.com/security/bulletin/ms08-033
- ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062751.html
Cumulative Security Update of ActiveX Kill Bits (950760) http://technet.microsoft.com/security/bulletin/ms08-032
Cumulative Security Update for Internet Explorer (950759) http://technet.microsoft.com/security/bulletin/ms08-031
- ZDI-08-039: Microsoft Internet Explorer DOM Ojbect substringData() Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062750.html
Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (951376) http://technet.microsoft.com/security/bulletin/ms08-030
Re-released 19 Jun 08.
(This is not an MS issue, but where to put it?)
CSIS-RI-0003: Multiple buffer overflow vulnerabilities in HP ActiveX http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062641.html
Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service (952044) http://technet.microsoft.com/security/bulletin/ms08-029
Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution (950749) http://technet.microsoft.com/security/bulletin/ms08-028
- Microsoft Security Advisory (950627) Vulnerability in Microsoft Jet Database Engine (Jet) Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/950627
- UPDATE: MSRC Blog: Microsoft Security Advisory (950627) http://blogs.technet.com/msrc/archive/2008/03/24/update-msrc-blog-microsoft-security-advisory-950627.aspx
- TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062285.html
Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208) http://technet.microsoft.com/security/bulletin/ms08-027
- Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062295.html
Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (951207) http://technet.microsoft.com/security/bulletin/ms08-026
- MS08-026: How to prevent Word from loading RTF files http://blogs.technet.com/swi/archive/2008/05/13/file-block-and-ms08-026.aspx
- ZDI-08-023: Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062286.html
- iDefense Security Advisory 05.13.08: Microsoft Word CSS Processing Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062287.html
Release notes for Windows XP Service Pack 3 http://support.microsoft.com/kb/936929
- AusCERT Update AU-2008.0009 -- Microsoft XP Service Pack 3 Includes Vulnerable Flash Player http://www.auscert.org.au/9388
- See also MS06-078 MS07-068 .
(This is not an MS issue, but where to put it?)
AusCERT Advisory AA-2008.0098 -- RealTek HD Audio Codec Driver Local Privilege Escalation http://www.auscert.org.au/9210
Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693) http://technet.microsoft.com/security/bulletin/ms08-025
Cumulative Security Update for Internet Explorer (947864) http://technet.microsoft.com/security/bulletin/ms08-024
Security Update of ActiveX Kill Bits (948881) http://technet.microsoft.com/security/bulletin/ms08-023
- iDefense Security Advisory 04.08.08: Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061290.html
Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338) http://technet.microsoft.com/security/bulletin/ms08-022
Vulnerabilities in GDI Could Allow Remote Code Execution (948590) http://technet.microsoft.com/security/bulletin/ms08-021
- ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061278.html
- iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061298.html
  iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Heap Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061299.html
Vulnerability in DNS Client Could Allow Spoofing (945553) http://technet.microsoft.com/security/bulletin/ms08-020
- Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020) http://www.securityfocus.com/archive/1/490575
- Microsoft SWI blog inaccuracies http://www.securityfocus.com/archive/1/491392
Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (949032) http://technet.microsoft.com/security/bulletin/ms08-019
Vulnerability in Microsoft Project Could Allow Remote Code Execution (950183) http://technet.microsoft.com/security/bulletin/ms08-018
Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (933103) http://technet.microsoft.com/security/bulletin/ms08-017
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030) http://technet.microsoft.com/security/bulletin/ms08-016
- ZDI-08-008: Microsoft Excel BIFF File Format Cell Record Parsing Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060692.html
Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031) http://technet.microsoft.com/security/bulletin/ms08-015
- iDefense Security Advisory 03.11.08: Microsoft Outlook mailto Command Line Switch Injection http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060698.html
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029) http://technet.microsoft.com/security/bulletin/ms08-014
Re-released 19 Mar 08: http://support.microsoft.com/kb/950340/
- Microsoft Security Advisory (947563) Vulnerability in Microsoft Excel Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/947563
- iDefense Security Advisory 03.11.08: Microsoft Excel DVAL Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060696.html
- iDefense Security Advisory 03.11.08: Microsoft Excel 2003 Malformed Formula Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060697.html
- TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability http://www.securityfocus.com/archive/1/489430
Vulnerability in Microsoft Office Could Allow Remote Code Execution (947108) http://technet.microsoft.com/security/bulletin/ms08-013
Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution (947085) http://technet.microsoft.com/security/bulletin/ms08-012
Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081) http://technet.microsoft.com/security/bulletin/ms08-011
- MS08-011/CVE-2008-0108 exploit. http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060308.html
Cumulative Security Update for Internet Explorer (944533) http://technet.microsoft.com/security/bulletin/ms08-010
Vulnerability in Microsoft Word Could Allow Remote Code Execution (947077) http://technet.microsoft.com/security/bulletin/ms08-009
Vulnerability in OLE Automation Could Allow Remote Code Execution (947890) http://technet.microsoft.com/security/bulletin/ms08-008
Vulnerability in WebDAV Mini-Redirector Could Allow Remote Code Execution (946026) http://technet.microsoft.com/security/bulletin/ms08-007
Vulnerability in Windows TCP/IP Could Allow Denial of Service (946456) http://technet.microsoft.com/security/bulletin/ms08-004
Vulnerability in Active Directory Could Allow Denial of Service (946538) http://technet.microsoft.com/security/bulletin/ms08-003
Microsoft Security Advisory (943411) Update to Improve Windows Sidebar Protection http://technet.microsoft.com/security/advisory/943411
Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485) http://technet.microsoft.com/security/bulletin/ms08-002
Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644) http://technet.microsoft.com/security/bulletin/ms08-001
Cumulative Security Update for Internet Explorer (942615) http://technet.microsoft.com/security/bulletin/ms07-069
MS07-069 Cumulative Security Update for Internet Explorer - Post Install Issue http://blogs.technet.com/msrc/archive/2007/12/18/ms07-069-cumulative-security-update-for-internet-explorer-post-install-issue.aspx
Internet Explorer 6 crashes after you install security update 942615 on a computer that is running Windows XP Service Pack 2 http://support.microsoft.com/kb/946627
- ZDI-07-073: Microsoft Internet Explorer setExpression Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059040.html
- ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059041.html
- ZDI-07-075: Microsoft Internet Explorer Element Tags Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059043.html
- iDefense Security Advisory 12.11.07: Microsoft Internet Explorer JavaScript setExpression Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059081.html
Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 and 944275) http://technet.microsoft.com/security/bulletin/ms07-068
Vulnerability in Macrovision Driver Could Allow Local Elevation of Privilege (944653) http://technet.microsoft.com/security/bulletin/ms07-067
- Microsoft Security Advisory (944653) Vulnerability in Macrovision SECDRV.SYS Driver on Windows Could Allow Elevation of Privilege http://technet.microsoft.com/security/advisory/944653
(Vista) Vulnerability in Windows Kernel Could Allow Elevation of Privilege (943078) http://technet.microsoft.com/security/bulletin/ms07-066
Vulnerability in Message Queuing Could Allow Remote Code Execution (937894) http://technet.microsoft.com/security/bulletin/ms07-065
- ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059042.html
Vulnerabilities in DirectX Could Allow Remote Code Execution (941568) http://technet.microsoft.com/security/bulletin/ms07-064
- iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059083.html
(Vista) Vulnerability in SMBv2 Could Allow Remote Code Execution (942624) http://technet.microsoft.com/security/bulletin/ms07-063
Microsoft Security Advisory (945713) Vulnerability in Web Proxy Auto-Discovery (WPAD) Could Allow Information Disclosure http://technet.microsoft.com/security/advisory/945713
- Microsoft sends out security over bug scare http://www.smh.com.au/news/security/microsoft-sends-out-security-over-bug-scare/2007/12/03/1196530575355.html
- [dns-operations] Web Proxy Auto-Discovery (WPAD) Information Disclosure (fwd) http://www.securityfocus.com/archive/1/484559 http://lists.oarci.net/pipermail/dns-operations/2007-December/002160.html
Vulnerability in Windows URI Handling Could Allow Remote Code Execution (943460) http://technet.microsoft.com/security/bulletin/ms07-061
- Microsoft Security Advisory (943521) URL Handling Vulnerability in Windows XP and Windows Server 2003 with Windows Internet Explorer 7 Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/943521
- MSRC Blog: Additional Details and Background on Security Advisory 943521 http://blogs.technet.com/msrc/archive/2007/10/10/msrc-blog-additional-details-and-background-on-security-advisory-943521.aspx
- MSRC Blog: October 25th Update To Security Advisory 943521 http://blogs.technet.com/msrc/archive/2007/10/25/msrc-blog-october-25th-update-to-security-advisory-943521.aspx
- Third-party patch for CVE-2007-3896 (Internet Explorer 7 invalid URI handling) available http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066638.html
Vulnerability in Microsoft Word Could Allow Remote Code Execution (942695) http://technet.microsoft.com/security/bulletin/ms07-060
Vulnerability in RPC Could Allow Denial of Service (933729) http://technet.microsoft.com/security/bulletin/ms07-058
- ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066507.html
Cumulative Security Update for Internet Explorer (939653) http://technet.microsoft.com/security/bulletin/ms07-057
Security Update for Outlook Express and Windows Mail (941202) http://technet.microsoft.com/security/bulletin/ms07-056
- iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066439.html
Vulnerability in Kodak Image Viewer Could Allow Remote Code Execution (923810) http://technet.microsoft.com/security/bulletin/ms07-055
Vulnerability in MSN Messenger and Windows Live Messenger could allow Remote Code Execution (942099) http://technet.microsoft.com/security/bulletin/ms07-054
Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778) http://technet.microsoft.com/security/bulletin/ms07-053
Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution (941522) http://technet.microsoft.com/security/bulletin/ms07-052
Vulnerability in Microsoft Agent Could Allow Remote Code Execution (938827) http://technet.microsoft.com/security/bulletin/ms07-051
- iDefense Security Advisory 09.11.07: Microsoft Windows 2000 Agent URL Canonicalizing Stack Based Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065719.html
- Assurent VR - Microsoft Agent Crafted URL Stack Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065713.html
Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127) http://technet.microsoft.com/security/bulletin/ms07-050
- EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability http://www.securityfocus.com/archive/1/476498
Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123) http://technet.microsoft.com/security/bulletin/ms07-048
- Next generation malware: Windows Vista's gadget API http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065763.html
- iDefense Security Advisory 08.14.07: Microsoft Windows Vista Sidebar RSS Feeds Gadget Cross Site Scripting Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065273.html
Vulnerabilities in Windows Media Player Could Allow Remote Code Execution (936782) http://technet.microsoft.com/security/bulletin/ms07-047
- ZDI-07-046: Microsoft Windows Media Player Skin Parsing Size Mismatch Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065268.html
- ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065269.html
Vulnerability in GDI Could Allow Remote Code Execution (938829) http://technet.microsoft.com/security/bulletin/ms07-046
- EEYE: Windows Metafile AttemptWrite Heap Overflow http://www.securityfocus.com/archive/1/476505
Cumulative Security Update for Internet Explorer (937143) http://technet.microsoft.com/security/bulletin/ms07-045
- TlbInf32 ActiveX Command Execution http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065305.html
Vulnerability in Microsoft Excel Could Allow Remote Code Execution (940965) http://technet.microsoft.com/security/bulletin/ms07-044
- Technical Tips and Insights on MS07-049 and MS07-044 http://blogs.technet.com/msrc/archive/2007/08/23/technical-tips-and-insights-on-ms07-049-and-ms07-044.aspx
Vulnerability in OLE Automation Could Allow Remote Code Execution (921503) http://technet.microsoft.com/security/bulletin/ms07-043
Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (936227) http://technet.microsoft.com/security/bulletin/ms07-042
Re-released 28 Sep 07, 9 Jan 08, 24 Jun 08.
- ZDI-07-048: Microsoft Internet Explorer substringData() Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065270.html
- iDefense Security Advisory 08.14.07: Microsoft XML Core Services XMLDOM Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065272.html
Microsoft Security Advisory (932596) Update to Improve Kernel Patch Protection http://technet.microsoft.com/security/advisory/932596
Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212) http://technet.microsoft.com/security/bulletin/ms07-040
- Multiple .NET Null Byte Injection Vulnerabilities http://www.securityfocus.com/archive/1/473308
Vulnerability in Windows Vista Firewall Could Allow Information Disclosure (935807) http://technet.microsoft.com/security/bulletin/ms07-038
Re-released 15 Aug 07.
- SYMSA-2007-005: Vista Windows Firewall Incorrectly Applies Filtering to Teredo Interface http://www.securityfocus.com/archive/1/473294
Vulnerability in Microsoft Office Publisher 2007 Could Allow Remote Code Execution (936548) http://technet.microsoft.com/security/bulletin/ms07-037
- EEYE: Microsoft Publisher 2007 Arbitrary Pointer Dereference http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064538.html
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (936542) http://technet.microsoft.com/security/bulletin/ms07-036
Vulnerability in Win 32 API Could Allow Remote Code Execution (935839) http://technet.microsoft.com/security/bulletin/ms07-035
Cumulative Security Update for Outlook Express and Windows Mail (929123) http://technet.microsoft.com/security/bulletin/ms07-034
- MS07-034: Executing arbitrary script with mhtml: protocol handler http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/064131.html
Cumulative Security Update for Internet Explorer (933566) http://technet.microsoft.com/security/bulletin/ms07-033
- ZDI-07-037: Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063944.html
- ZDI-07-038: Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063945.html
- iDefense Security Advisory 06.12.07: Microsoft License Manager and urlmon.dll COM Object Interaction Invalid Memory Access Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063946.html
Vulnerability in Windows Vista Could Allow Information Disclosure (931213) http://technet.microsoft.com/security/bulletin/ms07-032
Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution (935840) http://technet.microsoft.com/security/bulletin/ms07-031
- Windows Oday release [SChannel Off-By-One Heap Corruption] http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063948.html
Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (927051) http://technet.microsoft.com/security/bulletin/ms07-030
Microsoft Security Advisory (927891) Update for Windows Installer (MSI) http://technet.microsoft.com/security/advisory/927891
Microsoft Security Advisory (937696) Release of Microsoft Office Isolated Conversion Environment (MOICE) and File Block Functionality for Microsoft Office http://technet.microsoft.com/security/advisory/937696
Cumulative Security Update for Internet Explorer (931768) http://technet.microsoft.com/security/bulletin/ms07-027
- ZDI-07-027: Microsoft Internet Explorer Table Column Deletion Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063227.html
- Secunia Research: Internet Explorer HTML Objects Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063254.html
Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873) http://technet.microsoft.com/security/bulletin/ms07-025
Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232) http://technet.microsoft.com/security/bulletin/ms07-024
- Microsoft Security Advisory (933052) Vulnerability in Microsoft Word Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/933052
- iDefense Security Advisory 05.08.07: Microsoft Word RTF File Parsing Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063245.html
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (934233) http://technet.microsoft.com/security/bulletin/ms07-023
- ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063226.html
- iDefense Security Advisory 05.08.07: Microsoft Excel Filter Record Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063244.html
Vulnerability in Windows Kernel Could Allow Elevation of Privilege (931784) http://technet.microsoft.com/security/bulletin/ms07-022
- EEYE: Windows VDM Zero Page Race Condition Privilege Escalation http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053673.html
Vulnerabilities in CSRSS Could Allow Remote Code Execution (930178) http://technet.microsoft.com/security/bulletin/ms07-021
- Microsoft Windows XP/2003/Vista memory corruption 0day http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051394.html http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051410.html http://blogs.technet.com/msrc/archive/2006/12/22/new-report-of-a-windows-vulnerability.aspx
  NtRaiseHardError Csrss.exe memory Disclosure exploit http://www.securityfocus.com/archive/1/455365
  csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit http://www.securityfocus.com/archive/1/455546
- EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053672.html
Vulnerability in Microsoft Agent Could Allow Remote Code Execution (932168) http://technet.microsoft.com/security/bulletin/ms07-020
- Secunia Research: Microsoft Agent URL Parsing Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053694.html
Vulnerability in Universal Plug and Play Could Allow Remote Code Execution (931261) http://technet.microsoft.com/security/bulletin/ms07-019
- iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053674.html
Vulnerabilities in GDI Could Allow Remote Code Execution (925902) http://technet.microsoft.com/security/bulletin/ms07-017
- Microsoft Security Advisory (935423) Vulnerability in Windows Animated Cursor Handling http://technet.microsoft.com/security/advisory/935423
- Update on Microsoft Security Advisory 935423 http://blogs.technet.com/msrc/archive/2007/03/30/update-on-microsoft-security-advisory-935423.aspx
- 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053269.html http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053292.html http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053303.html
- ANI Zeroday, Third Party Patch http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053271.html
  Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch) http://www.securityfocus.com/archive/1/464475
- More information on ZERT patch for ANI 0day http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053369.html
- iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053415.html
Cumulative Security Update for Internet Explorer (928090) http://technet.microsoft.com/security/bulletin/ms07-016
- iDefense Security Advisory 02.13.07: Microsoft 'wininet.dll' FTP Reply Null Termination Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052397.html
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554) http://technet.microsoft.com/security/bulletin/ms07-015
- Microsoft Security Advisory (932553) Vulnerability in Microsoft Office Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/932553
Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (929434) http://technet.microsoft.com/security/bulletin/ms07-014
- Microsoft Security Advisory (929433) Vulnerability in Microsoft Word Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/929433
  Microsoft Word 0-day Vulnerability FAQ - December 2006, CVE-2006-5994 http://blogs.securiteam.com/?p=759
- New Report of A Word Zero Day http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx
  Another new Word 0-day, information & dat released by McAfee http://isc.sans.edu/forums/diary/1925
- Microsoft Security Advisory (932114) Vulnerability in Microsoft Word 2000 Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/932114
Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution (918118) http://technet.microsoft.com/security/bulletin/ms07-013
Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667) http://technet.microsoft.com/security/bulletin/ms07-012
Re-released 13 Jun 07.
- MS07-012 Not Fixed http://www.securityfocus.com/archive/1/463009
Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436) http://technet.microsoft.com/security/bulletin/ms07-011
Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution (932135) http://technet.microsoft.com/security/bulletin/ms07-010
Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (927779) http://technet.microsoft.com/security/bulletin/ms07-009
- VU#589272 ADODB.Connection ActiveX control unspecified vulnerability http://www.kb.cert.org/vuls/id/589272
Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843) http://technet.microsoft.com/security/bulletin/ms07-008
Vulnerability in Windows Image Acquisition Service Could Allow Elevation of Privilege (927802) http://technet.microsoft.com/security/bulletin/ms07-007
Vulnerability in Windows Shell Could Allow Elevation of Privilege (928255) http://technet.microsoft.com/security/bulletin/ms07-006
Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (923723) http://technet.microsoft.com/security/bulletin/ms07-005
- MS Interactive Training .cbo Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052428.html
The computer may respond very slowly as the Phishing Filter evaluates Web page contents in Internet Explorer 7 http://support.microsoft.com/kb/928089
Vulnerability in Vector Markup Language Could Allow Remote Code Execution (929969) http://technet.microsoft.com/security/bulletin/ms07-004
- iDefense Security Advisory 01.09.07: Multiple Microsoft Products VML 'recolorinfo' Element Integer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051694.html
Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution (925938) http://technet.microsoft.com/security/bulletin/ms07-003
- Computer Terrorism (UK) :: Incident Response Centre - Microsoft Outlook Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051730.html
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (927198) http://technet.microsoft.com/security/bulletin/ms07-002
Re-released for Excel2000 18 Jan 07.
- iDefense Security Advisory 01.09.07: Microsoft Excel Invalid Column Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051695.html
- iDefense Security Advisory 01.09.07: Microsoft Excel Long Palette Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051696.html
Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution (921585) http://technet.microsoft.com/security/bulletin/ms07-001
Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689) http://technet.microsoft.com/security/bulletin/ms06-078
Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121) http://technet.microsoft.com/security/bulletin/ms06-077
Cumulative Security Update for Outlook Express (923694) http://technet.microsoft.com/security/bulletin/ms06-076
Vulnerability in Windows Could Allow Elevation of Privilege (926255) http://technet.microsoft.com/security/bulletin/ms06-075
Vulnerability in SNMP Could Allow Remote Code Execution (926247) http://technet.microsoft.com/security/bulletin/ms06-074
Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution (925674) http://technet.microsoft.com/security/bulletin/ms06-073
- Microsoft Security Advisory (927709) Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/927709
- Microsoft patches the WMI Object Broker bug http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050479.html http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050480.html
- ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051256.html
Cumulative Security Update for Internet Explorer (925454) http://technet.microsoft.com/security/bulletin/ms06-072
- ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051257.html
- Secunia Research: Internet Explorer Script Error Handling Memory Corruption http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051262.html
(This is not an MS issue, but where to put it?)
EEYE: Intel Network Adapter Driver Local Privilege Escalation http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051152.html
Intel LAN Driver Buffer Overflow Local Privilege Escalation http://support.intel.com/support/network/sb/CS-023726.htm
(This is not an MS issue, but where to put it?)
AusCERT Alert AL-2006.0106 -- NetGear WG111v2 Wireless Driver for Windows Long Beacon Overflow http://www.auscert.org.au/6992
AusCERT Alert AL-2006.0108 -- NetGear MA521 Wireless Driver for Windows Long Rates Overflow http://www.auscert.org.au/7002
See about disabling unused network interfaces, particularly wireless.
Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (928088) http://technet.microsoft.com/security/bulletin/ms06-071
- Microsoft Security Advisory (927892) Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/927892
Vulnerability in Workstation Service Could Allow Remote Code Execution (924270) http://technet.microsoft.com/security/bulletin/ms06-070
The bulletin says: On Windows XP Service Pack 2 the attack could only be successfully performed by a user with Administrator privileges but still WinXPSP2 is listed as affected: I am confused.
- EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050716.html
Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (923789) http://technet.microsoft.com/security/bulletin/ms06-069
- Microsoft Security Advisory (925143) Adobe Security Bulletin: APSB06-11 Flash Player Update to Address Security Vulnerabilities http://technet.microsoft.com/security/advisory/925143
Superseded (same day!?), see:
Update available for HTTP Header Injection Vulnerabilities in Adobe Flash Player http://www.adobe.com/support/security/bulletins/apsb06-18.html
Vulnerability in Microsoft Agent Could Allow Remote Code Execution (920213) http://technet.microsoft.com/security/bulletin/ms06-068
- COSEINC Alert: Microsoft Agent Heap Overflow Vulnerability Technical Details (Patched) http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052072.html
Cumulative Security Update for Internet Explorer (922760) http://technet.microsoft.com/security/bulletin/ms06-067
- Microsoft Security Advisory (925444) Vulnerability in the Microsoft DirectAnimation Path ActiveX Control Could Allow Remote Control Execution http://technet.microsoft.com/security/advisory/925444
- [0day] daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit http://www.securityfocus.com/archive/1/445898
- ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050715.html
- ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050717.html
Vulnerabilities in Client Service for NetWare Could Allow Remote Code Execution (923980) http://technet.microsoft.com/security/bulletin/ms06-066
(This is not an MS issue, but where to put it?)
AusCERT Alert AL-2006.0103 -- Broadcom Wireless Driver Probe Response SSID Overflow http://www.auscert.org.au/6959
and also D-Link DWL-G132 USB adapter.
- Wireless fun! http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050675.html
See about disabling unused network interfaces, particularly wireless.
(This is not an MS issue, but where to put it?)
AusCERT Advisory AA-2006.0085 -- Multiple laptops - Bluetooth stack vulnerability may allow remote compromise http://www.auscert.org.au/6893
Microsoft Security Advisory (917021) Description of the Wi-Fi Protected Access 2 support for Wireless Group Policy in Windows XP Service Pack 2 http://technet.microsoft.com/security/advisory/917021
Vulnerability In Windows Object Packager Could Allow Remote Code Execution (924496) http://technet.microsoft.com/security/bulletin/ms06-065
- Secunia Research: Microsoft Windows Object Packager Dialog Spoofing http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049986.html
Vulnerabilities in TCP/IP Could Allow Denial of Service (922819) http://technet.microsoft.com/security/bulletin/ms06-064
Vulnerability in Server Service Could Allow Denial of Service (923414) http://technet.microsoft.com/security/bulletin/ms06-063
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922581) http://technet.microsoft.com/security/bulletin/ms06-062
- ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049956.html
Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (924191) http://technet.microsoft.com/security/bulletin/ms06-061
Re-released 19 Oct 06.
Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (924554) http://technet.microsoft.com/security/bulletin/ms06-060
- Microsoft Security Advisory (925059) Vulnerability in Word Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/925059
- Microsoft Word 0-day Vulnerability FAQ - September 2006, CVE-2006-4534 http://blogs.securiteam.com/?p=586
- MS06-060 Microsoft Word Memmove Code Execution http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049996.html
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164) http://technet.microsoft.com/security/bulletin/ms06-059
Re-released 12 Dec 06.
- ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049954.html
Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (924163) http://technet.microsoft.com/security/bulletin/ms06-058
- Microsoft Security Advisory (925984) Vulnerability in PowerPoint Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/925984
- Microsoft PowerPoint Document Handling Client-Side Code Execution Vulnerability http://www.frsirt.com/english/advisories/2006/3794
- ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049955.html
Vulnerability in Windows Shell Could Allow Remote Code Execution (923191) http://technet.microsoft.com/security/bulletin/ms06-057
- Microsoft Security Advisory (926043) Vulnerability in Windows Shell Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/926043
- Exploit module available for WebViewFolderIcon setSlice 0-day http://www.securityfocus.com/archive/1/447174
Vulnerability in ASP.NET Could Allow Information Disclosure (922770) http://technet.microsoft.com/security/bulletin/ms06-056
Vulnerability in Vector Markup Language Could Allow Remote Code Execution (925486) http://technet.microsoft.com/security/bulletin/ms06-055
- Microsoft Security Advisory (925568) Vulnerability in Vector Markup Language Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/925568
- Sunbelt Software: New Microsoft Internet Explorer Expolit - 9-18-2006 http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049538.html
- Internet Explorer VML Zero-Day Mitigation http://blogs.securiteam.com/?p=624
Microsoft Security Advisory (922582) Update for Windows http://technet.microsoft.com/security/advisory/922582
Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729) http://technet.microsoft.com/security/bulletin/ms06-054
- Computer Terrorism (UK) :: Incident Response Centre - Microsoft Publisher Font Parsing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049423.html
Vulnerability in Indexing Service Could Allow Cross-Site Scripting (920685) http://technet.microsoft.com/security/bulletin/ms06-053
- Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053] http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049784.html
(WXP) Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007) http://technet.microsoft.com/security/bulletin/ms06-051
Vulnerability in Windows Kernel Could Result in Remote Code Execution (917422) http://technet.microsoft.com/security/bulletin/ms06-051
Vulnerabilities in Microsoft Windows Hyperlink Object Library Could Allow Remote Code Execution (920670) http://technet.microsoft.com/security/bulletin/ms06-050
- ***ULTRALAME*** Microsoft Excel Unicode Overflow ***ULTRALAME*** http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047005.html http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047041.html
- http://blogs.technet.com/msrc/archive/2006/06/20/437826.aspx
- AusCERT Alert AL-2006.0051 -- Microsoft Hyperlink Object Library stack buffer overflow http://www.auscert.org.au/6421
- TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048591.html
(W2k) Vulnerability in Windows Kernel Could Result in Elevation of Privilege (920958) http://technet.microsoft.com/security/bulletin/ms06-049
Re-released 27 Sep 06.
- FYI: MS06-049 patch (920958) corrupts NTFS compression files http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049369.html
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922968) http://technet.microsoft.com/security/bulletin/ms06-048
- Microsoft Security Advisory (922970) Vulnerability in PowerPoint Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/922970
- AusCERT Advisory AA-2006.0046) -- Microsoft PowerPoint vulnerability allows execution of arbitrary code http://www.auscert.org.au/6483
- Microsoft PowerPoint 0-day Vulnerability FAQ http://blogs.securiteam.com/?p=508
Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (921645) http://technet.microsoft.com/security/bulletin/ms06-047
Vulnerability in HTML Help Could Allow Remote Code Execution (922616) http://technet.microsoft.com/security/bulletin/ms06-046
Vulnerability in Windows Explorer Could Allow Remote Code Execution (921398) http://technet.microsoft.com/security/bulletin/ms06-045
- TSRT-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048589.html
(W2k) Vulnerability in Microsoft Management Console Could Allow Remote Code Execution (917008) http://technet.microsoft.com/security/bulletin/ms06-044
Vulnerability in Microsoft Windows Could Allow Remote Code Execution (920214) http://technet.microsoft.com/security/bulletin/ms06-043
Cumulative Security Update for Internet Explorer (918899) http://technet.microsoft.com/security/bulletin/ms06-042
Updated 15 Aug 06 and again 24 Aug 06, yet again on 12 Sep 06, but as noted in http://blogs.msdn.com/ie/archive/2006/09/12/750815.aspx the problem http://support.microsoft.com/kb/923996/ is still not fixed.
- ZDI-06-026: Microsoft Internet Explorer Multiple CSS Imports Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048586.html
- ZDI-06-027: Microsoft Internet Explorer CSS Class Ordering Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048587.html
- TSRT-06-09: Microsoft DirectAnimation COM Object Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048590.html
- EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/049008.html
- [EEYEB-20080824] Internet Explorer Compressed Content URL Heap Overflow Vulnerability #2 http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049428.html
Vulnerability in DNS Resolution Could Allow Remote Code Execution (920683) http://technet.microsoft.com/security/bulletin/ms06-041
Vulnerability in Server Service Could Allow Remote Code Execution (921883) http://technet.microsoft.com/security/bulletin/ms06-040
Re-released 12 Sep 06 (for W2003 and WinXPx64 only).
(This is not an MS issue, but where to put it?)
AusCERT AL-2006.0063 -- Intel Centrino Wireless Driver Malformed Frame Remote Code Execution http://www.auscert.org.au/6577
See about disabling unused network interfaces, particularly wireless.
Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (915384) http://technet.microsoft.com/security/bulletin/ms06-039
See also: NSFOCUS SA2006-04 : Microsoft Office GIF Filter Buffer Overflow Vulnerability http://www.securityfocus.com/archive/1/439887
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (917284) http://technet.microsoft.com/security/bulletin/ms06-038
See also: SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability http://www.securityfocus.com/archive/1/439697
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285) http://technet.microsoft.com/security/bulletin/ms06-037
- Microsoft Security Advisory (921365) Vulnerability in Excel Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/921365
  ZDI-06-022: Microsoft Office Excel File Rebuilding Code Execution Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047822.html
  Microsoft Excel Array Index Error Remote Code Execution http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047834.html
  Microsoft Excel Could Allow Remote Code Execution by Malformed FNGROUPCOUNT value Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047837.html
  NSFOCUS SA2006-05 : Microsoft Excel SELECTION Record Memory Corruption Vulnerability http://www.securityfocus.com/archive/1/439914
  NSFOCUS SA2006-06 : Microsoft Excel COLINFO Record Buffer Overflow Vulnerability http://www.securityfocus.com/archive/1/439909
- Reports of a new vulnerability in Microsoft Excel http://blogs.technet.com/msrc/archive/2006/06/16/436174.aspx http://blogs.technet.com/msrc/archive/2006/06/17/436860.aspx
- Reports of Excel 0-Day http://isc.sans.edu/forums/diary/1420 http://isc.sans.edu/forums/diary/1426
- Microsoft Excel 0-day Vulnerability FAQ http://blogs.securiteam.com/?p=451
- Secunia http://secunia.com/advisories/20686/ had this (before ms06-037) with a "green tick" for "Vendor Workaround", though that might work for Excel2003 only.
Vulnerability in DHCP Client Service Could Allow Remote Code Execution (914388) http://technet.microsoft.com/security/bulletin/ms06-036
See also: CYBSEC - Security Pre-Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047819.html
CYBSEC - Security Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/049125.html
Vulnerability in Server Service Could Allow Remote Code Execution (917159) http://technet.microsoft.com/security/bulletin/ms06-035
Information About Public Postings Related to MS06-035 http://blogs.technet.com/msrc/archive/2006/07/28/443837.aspx
AusCERT ESB-2006.0527 -- Vulnerability in Server Driver could result in Denial of Service http://www.auscert.org.au/6555
This DoS is not fixed in Aug06 yet, see http://blogs.technet.com/msrc/archive/2006/08/09/445600.aspx
See also: Microsoft SMB Information Disclosure Vulnerability CVE-2006-1315 http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047828.html
TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability http://www.securityfocus.com/archive/1/439773
Vulnerability in TCP/IP Could Allow Remote Code Execution (917953) http://technet.microsoft.com/security/bulletin/ms06-032
(W2k) Vulnerability in RPC Mutual Authentication Could Allow Spoofing (917736) http://technet.microsoft.com/security/bulletin/ms06-031
Vulnerability in Server Message Block Could Allow Elevation of Privilege (914389) http://technet.microsoft.com/security/bulletin/ms06-030
See also: iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046876.html
iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046877.html
[REVERSEMODE ADVISORY] MS06-030 - Microsoft Mrxsmb.sys privilege escalation advisory http://www.securityfocus.com/archive/1/437006
[REVERSEMODE ADVISORY] MS06-030 NtClose DeadLock. http://www.securityfocus.com/archive/1/437016
Regarding "SMB Invalid Handle Value" - MS06-030. Vulnerability not fixed. http://www.securityfocus.com/archive/1/437320
Vulnerability in Microsoft PowerPoint Could Allow Remote Code Execution (916768) http://technet.microsoft.com/security/bulletin/ms06-028
Vulnerability in Microsoft Word Could Allow Remote Code Execution (917336) http://technet.microsoft.com/security/bulletin/ms06-027
- Microsoft Security Advisory (919637) Vulnerability in Word Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/919637
- Microsoft fixes Word 0-day flaw - related to Smart Tags http://blogs.securiteam.com/index.php/archives/436
- http://www.auscert.org.au/6316
- http://www.kb.cert.org/vuls/id/446012
- http://isc.sans.edu/forums/diary/1347 http://isc.sans.edu/forums/diary/1351
- http://blogs.technet.com/msrc/archive/2006/05/19/429353.aspx
- http://www.eeye.com/html/resources/newsletters/alert/pub/AL20060523.html
(W98) Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (918547) http://technet.microsoft.com/security/bulletin/ms06-026
Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280) http://technet.microsoft.com/security/bulletin/ms06-025
Update 18 Jun 06: This patch may affect dial-up networking, see http://support.microsoft.com/kb/911280
Re-released 27 Jun 06.
Vulnerability in Windows Media Player Could Allow Remote Code Execution (917734) http://technet.microsoft.com/security/bulletin/ms06-024
See also: iDefense Security Advisory 06.13.06: Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046874.html
Vulnerability in Microsoft JScript Could Allow Remote Code Execution (917344) http://technet.microsoft.com/security/bulletin/ms06-023
Vulnerability in ART Image Rendering Could Allow Remote Code Execution (918439) http://technet.microsoft.com/security/bulletin/ms06-022
See also: iDefense Security Advisory 06.13.06: Microsoft Internet Explorer ART File Heap Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046875.html
Cumulative Security Update for Internet Explorer (916281) http://technet.microsoft.com/security/bulletin/ms06-021
See also: ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046880.html
ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046879.html
(x64) Microsoft Security Advisory (914784) Update to Improve Kernel Patch Protection http://technet.microsoft.com/security/advisory/914784
Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (913433) http://technet.microsoft.com/security/bulletin/ms06-020
See also (was released 9 Nov 05): Microsoft Security Advisory (910550) Macromedia Security Bulletin: MPSB05-07 Flash Player 7 Improper Memory Access Vulnerability http://technet.microsoft.com/security/advisory/910550
See also (was released 14 Mar 06, not cross-referenced): Microsoft Security Advisory (916208) Adobe Security Bulletin: APSB06-03 Flash Player Update to Address Security Vulnerabilities http://technet.microsoft.com/security/advisory/916208
Vulnerability in Microsoft Distributed Transaction Coordinator Could Allow Denial of Service (913580) http://technet.microsoft.com/security/bulletin/ms06-018
See also: [EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045921.html
[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045920.html
Microsoft MSDTC NdrAllocate Validation Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045952.html
Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting (917627) http://technet.microsoft.com/security/bulletin/ms06-017
See also: Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting http://www.securityfocus.com/archive/1/430803
Cumulative Security Update for Outlook Express (911567) http://technet.microsoft.com/security/bulletin/ms06-016
See also: ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045003.html
See also: Recent Microsoft Patches Causing Problems (20 April 2006) http://www.sans.org/newsletters/newsbites/viii/32#306
Vulnerability in Windows Explorer Could Allow Remote Code Execution (908531) http://technet.microsoft.com/security/bulletin/ms06-015
Re-released 25 Apr 06.
See also: Recent Microsoft Patches Causing Problems (20 April 2006) http://www.sans.org/newsletters/newsbites/viii/32#306
You may experience problems in Windows Explorer or in the Windows shell after you install security update MS06-015 http://support.microsoft.com/kb/918165
Vulnerability in the Microsoft Data Access Components (MDAC) Function Could Allow Code Execution (911562) http://technet.microsoft.com/security/bulletin/ms06-014
Cumulative Security Update for Internet Explorer (912812) http://technet.microsoft.com/security/bulletin/ms06-013
See also: Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045032.html
[BuHa-Security] Multiple Vulnerabilities in MS IE 6.0 SP2 http://www.securityfocus.com/archive/1/430882
See also: Microsoft Security Advisory (917077) Vulnerability in the way HTML Objects Handle Unexpected Method Calls Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/917077
Microsoft Security Advisory (912945) Non-Security Update for Internet Explorer http://technet.microsoft.com/security/advisory/912945
See also: Popup Blocker Bypass Script http://www.securityfocus.com/archive/1/428610
See also: Recent Microsoft Patches Causing Problems (20 April 2006) http://www.sans.org/newsletters/newsbites/viii/32#306
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (905413) http://technet.microsoft.com/security/bulletin/ms06-012
See also: Microsoft PowerPoint Vulnerability FAQ - August 2006, CVE-2006-4274 http://blogs.securiteam.com/?p=559
Permissive Windows Services DACLs Could Allow Elevation of Privilege (914798) http://technet.microsoft.com/security/bulletin/ms06-011
Re-released 13 Jun 06 (need to re-apply).
See also: Microsoft Security Advisory (914457) Possible Vulnerability in Windows Service ACLs http://technet.microsoft.com/security/advisory/914457
Vulnerability in PowerPoint 2000 Could Allow Information Disclosure (889167) http://technet.microsoft.com/security/bulletin/ms06-010
Vulnerability in the Korean Input Method Editor Could Allow Elevation of Privilege (901190) http://technet.microsoft.com/security/bulletin/ms06-009
Vulnerability in Web Client Service Could Allow Remote Code Execution (911927) http://technet.microsoft.com/security/bulletin/ms06-008
Vulnerability in TCP/IP Could Allow Denial of Service (913446) http://technet.microsoft.com/security/bulletin/ms06-007
Vulnerability in Windows Media Player Plug-in with Non-Microsoft Internet Browsers Could Allow Remote Code Execution (911564) http://technet.microsoft.com/security/bulletin/ms06-006
See also: iDefense Security Advisory 02.14.06: Microsoft Windows Media Player Plugin Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042186.html
Vulnerability in Windows Media Player Could Allow Remote Code Execution (911565) http://technet.microsoft.com/security/bulletin/ms06-005
See also: After you apply some updates, you may experience some issues when you try to seek, to fast rewind, or to fast forward in Windows Media Player 10 http://support.microsoft.com/kb/912226
[EEYEB-20051017] Windows Media Player BMP Heap Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042197.html
Cumulative Security Update for Internet Explorer (910620) http://technet.microsoft.com/security/bulletin/ms06-004
See also: Microsoft Security Advisory (913333) Vulnerability in Internet Explorer Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/913333
Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution (902412) http://technet.microsoft.com/security/bulletin/ms06-003
See also: Microsoft Exchange Critical Vulnerability http://www.securityfocus.com/archive/1/421518
Microsoft Outlook Critical Vulnerability http://www.securityfocus.com/archive/1/421520
Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution (908519) http://technet.microsoft.com/security/bulletin/ms06-002
See also: [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041249.html http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041250.html
Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919) http://technet.microsoft.com/security/bulletin/ms06-001
See also: Microsoft Security Advisory (912840) Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution http://technet.microsoft.com/security/advisory/912840
Is this a new exploit? http://www.securityfocus.com/archive/1/420288
Someone wasted a nice bug on spyware... http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040668.html http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040699.html
AUSCERT ALERT AL-2005.0043 -- Unpatched flaw in WMF image file handling exploited in wild http://www.auscert.org.au/5872
AusCERT Update AU-2005.0023 -- Partial workarounds available for WMF file handling vulnerability http://www.auscert.org.au/5873
WMF Exploit http://www.securityfocus.com/archive/1/420378 http://www.securityfocus.com/archive/1/420379 http://www.securityfocus.com/archive/1/420660 http://www.securityfocus.com/archive/1/420769
Exploiting WMF (tiny) FAQ http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041044.html
(W2k) Vulnerability in Windows Kernel Could Allow Elevation of Privilege (908523) http://technet.microsoft.com/security/bulletin/ms05-055
See also: [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039896.html
Cumulative Security Update for Internet Explorer (905915) http://technet.microsoft.com/security/bulletin/ms05-054
See also: Microsoft Security Advisory (911302) Vulnerability in the way Internet Explorer Handles Mismatched Document Object Model Objects Could Allow Remote Code Execution (was ... Handles onLoad Events ...) http://technet.microsoft.com/security/advisory/911302
Malicious Software Encyclopedia: TrojanDownloader:Win32/Delf.DH http://www.microsoft.com/security/encyclopedia/details.aspx?name=TrojanDownloader:Win32/Delf.DH
Secunia Research: Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039907.html
Secunia Research: Internet Explorer Suppressed "Download Dialog" Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039908.html
See also: Microsoft Internet Explorer does not honor ActiveX kill bit http://www.kb.cert.org/vuls/id/998297
Microsoft Security Advisory (911052) Memory Allocation Denial of Service Via RPC http://technet.microsoft.com/security/advisory/911052
Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424) http://technet.microsoft.com/security/bulletin/ms05-053
See also: [EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability) http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038491.html
[EEYEB-20050329] Windows Metafile Multiple Heap Overflows http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038492.html
Cumulative Security Update for Internet Explorer (896688) http://technet.microsoft.com/security/bulletin/ms05-052
(I wonder why http://support.microsoft.com/kb/870669 was not promoted more vigorously ...)
See also: [EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability http://www.securityfocus.com/archive/1/413000
Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution (902400) http://technet.microsoft.com/security/bulletin/ms05-051
See also: Microsoft Security Advisory (909444) Various Issues After Installing Microsoft Security Bulletin MS05-051 on Systems That Have Non-default File Permissions http://technet.microsoft.com/security/advisory/909444
iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/037908.html
iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/037909.html
[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability http://www.securityfocus.com/archive/1/413001
Vulnerability in DirectShow Could Allow Remote Code Execution (904706) http://technet.microsoft.com/security/bulletin/ms05-050
See also: The computer may not be updated after you install the "Security Update for DirectX 7.0 for Windows 2000 (KB904706)" on a Windows 2000-based computer that is running DirectX 8 or DirectX 9 http://support.microsoft.com/kb/909596
[EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability http://www.securityfocus.com/archive/1/413002
Vulnerabilities in Windows Shell Could Allow Remote Code Execution (900725) http://technet.microsoft.com/security/bulletin/ms05-049
See also: [Argeniss] Story of a dumb patch (Paper advisory about CSRSS and Windows Explorer vulnerabilities) http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038045.html
Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245) http://technet.microsoft.com/security/bulletin/ms05-048
See also: [SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/037919.html
Vulnerability in Plug and Play Could Allow Remote Code Execution and Local Elevation of Privilege (905749) http://technet.microsoft.com/security/bulletin/ms05-047
See also: [EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability http://www.securityfocus.com/archive/1/412999
Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution (899589) http://technet.microsoft.com/security/bulletin/ms05-046
Vulnerability in Network Connection Manager Could Allow Denial of Service (905414) http://technet.microsoft.com/security/bulletin/ms05-045
Vulnerability in the Windows FTP Client Could Allow File Transfer Location Tampering (905495) http://technet.microsoft.com/security/bulletin/ms05-044
AUSCERT Advisory AA-2005.0014 -- Microsoft Releases Service Packs for Office, Project and Visio http://www.auscert.org.au/5543
See also: http://support.microsoft.com/kb/887616 http://support.microsoft.com/kb/887620 http://support.microsoft.com/kb/887622
Microsoft Security Advisory (897663) Windows Firewall Exception May Not Display in the User Interface http://technet.microsoft.com/security/advisory/897663
Vulnerability in Print Spooler Service Could Allow Remote Code Execution (896423) http://technet.microsoft.com/security/bulletin/ms05-043
Vulnerabilities in Kerberos Could Allow Denial of Service, Information Disclosure, and Spoofing (899587) http://technet.microsoft.com/security/bulletin/ms05-042
Vulnerability in Remote Desktop Protocol Could Allow Denial of Service (899591) http://technet.microsoft.com/security/bulletin/ms05-041
Vulnerability in Telephony Service Could Allow Remote Code Execution (893756) http://technet.microsoft.com/security/bulletin/ms05-040
Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588) http://technet.microsoft.com/security/bulletin/ms05-039
See also: (Zotob worm) Microsoft Security Advisory (899588) Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege http://technet.microsoft.com/security/advisory/899588
Microsoft Security Advisory (906574) Clarification of Simple File Sharing and ForceGuest http://technet.microsoft.com/security/advisory/906574
Cumulative Security Update for Internet Explorer (896727) http://technet.microsoft.com/security/bulletin/ms05-038
Re-released 10 Aug 05.
See also: NSFOCUS SA2005-02 : Microsoft IE Devenum.dll COM Instantiation Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/407777
Microsoft Security Advisory (906267) A COM Object (Msdds.dll) Could Cause Internet Explorer to Unexpectedly Exit http://technet.microsoft.com/security/advisory/906267
Microsoft Internet Explorer allows non-ActiveX COM objects to be instantiated http://www.kb.cert.org/vuls/id/680526
An update that addresses Outlook Express 6.0 issues is available for Windows XP http://support.microsoft.com/kb/900930
Is this related to http://www.securityfocus.com/bid/4092 http://archives.neohapsis.com/archives/bugtraq/2002-02/0124.html ?
Vulnerability in JView Profiler Could Allow Remote Code Execution (903235) http://technet.microsoft.com/security/bulletin/ms05-037
Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution (901214) http://technet.microsoft.com/security/bulletin/ms05-036
Vulnerability in Microsoft Word Could Allow Remote Code Execution (903672) http://technet.microsoft.com/security/bulletin/ms05-035
See also: iDEFENSE Security Advisory 07.12.05: Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035044.html
Update Rollup 1 for Windows 2000 SP4 http://support.microsoft.com/kb/891861
See also: NULL sessions vulnerabilities using alternate named pipes http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/034959.html
Vulnerability in Telnet Client Could Allow Information Disclosure (896428) http://technet.microsoft.com/security/bulletin/ms05-033
Re-released 12 Jul 05.
See also: iDEFENSE Security Advisory 06.14.05: Multiple Vendor Telnet Client Information Disclosure Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034558.html
Vulnerability in Microsoft Agent Could Allow Spoofing (890046) http://technet.microsoft.com/security/bulletin/ms05-032
See also: What A Click! [Internet Explorer] http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041714.html
Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (898458) http://technet.microsoft.com/security/bulletin/ms05-031
See also: iDEFENSE Security Advisory 06.14.05: Microsoft Windows Interactive Training Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034561.html
Cumulative Security Update in Outlook Express (897715) http://technet.microsoft.com/security/bulletin/ms05-030
See also: iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034559.html
Update 9 Aug 05: ms05-030 is in fact NOT cumulative (was renamed Vulnerability in Outlook Express Could Allow Remote Code Execution (897715)) and does NOT include MS04-018.
[WinXP SP1 only?] Vulnerability in Web Client Service Could Allow Remote Code Execution (896426) http://technet.microsoft.com/security/bulletin/ms05-028
Vulnerability in Server Message Block Could Allow Remote Code Execution (896422) http://technet.microsoft.com/security/bulletin/ms05-027
Vulnerability in HTML Help Could Allow Remote Code Execution (896358) http://technet.microsoft.com/security/bulletin/ms05-026
See also: High Risk Vulnerability in HTML Help (ITSS Parser) http://www.securityfocus.com/archive/1/402309
eEye Advisory - EEYEB-20050316 - HTML Help File Parsing Buffer Overflow http://www.securityfocus.com/archive/1/402350
Cumulative Security Update for Internet Explorer (883939) http://technet.microsoft.com/security/bulletin/ms05-025
Updates for Windows Media Player 9 Series and for Windows Media Player 10 http://support.micorsoft.com/kb/892313
(W2k) Vulnerability in Web View Could Allow Remote Code Execution (894320) http://technet.microsoft.com/security/bulletin/ms05-024
See also: File Selection May Lead to Command Execution (GM#015-IE) http://www.securityfocus.com/archive/1/396224
Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169) http://technet.microsoft.com/security/bulletin/ms05-023
Re-released 14 Jun 05, or maybe not:
MajorRev: v2.0 Microsoft Security Bulletin MS05-023 - Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169) http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0095.html
Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597) http://technet.microsoft.com/security/bulletin/ms05-022
Cumulative Security Update for Internet Explorer (890923) http://technet.microsoft.com/security/bulletin/ms05-020
See also: iDEFENSE Security Advisory 04.12.05: Microsoft Internet Explorer DHTML Engine Race Condition Vulnerability http://www.securityfocus.com/archive/1/395562
iDEFENSE Security Advisory 04.12.05: Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability http://www.securityfocus.com/archive/1/395559
Internet Explorer wininet.dll URL parsing memory corruption technical details http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033373.html
Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service (893066) http://technet.microsoft.com/security/bulletin/ms05-019
Re-released 14 Jun 05: re-install.
See also: MS05-019 breaks TCP raw socket sends http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0040.html
MS05-019 Breaks VPN http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0049.html http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0053.html http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0057.html Bug in Patch MS05-019 http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0052.html
Raw sockets, MS05-019 and Windows Firewall -- Summary http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0058.html
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege and Denial of Service (890859) http://technet.microsoft.com/security/bulletin/ms05-018
See also: iDEFENSE Security Advisory 04.12.05: Microsoft Windows CSRSS.EXE Stack Overflow Vulnerability http://www.securityfocus.com/archive/1/395560
Windows kernel overflow fixed http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0044.html
autorun problems after installing latest MS patches ms05-016 to -022 on Win2k server http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0041.html http://archives.neohapsis.com/archives/ntbugtraq/2005-q2/0043.html
Vulnerability in Message Queuing Could Allow Code Execution (892944) http://technet.microsoft.com/security/bulletin/ms05-017
Vulnerability in Windows Shell that Could Allow Remote Code Execution (893086) http://technet.microsoft.com/security/bulletin/ms05-016
See also: iDEFENSE Security Advisory 04.12.05: Microsoft MSHTA Script Execution Vulnerability http://www.securityfocus.com/archive/1/395563
Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution (888113) http://technet.microsoft.com/security/bulletin/ms05-015
Cumulative Security Update for Internet Explorer (867282) http://technet.microsoft.com/security/bulletin/ms05-014
See also: Internet Explorer zone spoofing with encoded URLs http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031545.html
Vulnerability in the DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (891781) http://technet.microsoft.com/security/bulletin/ms05-013
Vulnerability in OLE and COM Could Allow Remote Code Execution (873333) http://technet.microsoft.com/security/bulletin/ms05-012
Vulnerability in Server Message Block Could Allow Remote Code Execution (885250) http://technet.microsoft.com/security/bulletin/ms05-011
See also: GREENAPPLE Release http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031528.html
EEYE: Windows SMB Client Transaction Response Handling Vulnerability http://www.securityfocus.com/archive/1/389813 http://www.securityfocus.com/archive/1/392768
Vulnerability in PNG Processing Could Allow Remote Code Execution (890261) http://technet.microsoft.com/security/bulletin/ms05-009
See also: CORE-2004-0819: MSN Messenger PNG Image Parsing Vulnerability http://www.securityfocus.com/archive/1/389801
Vulnerability in Windows Shell Could Allow Remote Code Execution (890047) http://technet.microsoft.com/security/bulletin/ms05-008
Vulnerability in Windows Could Allow Information Disclosure (888302) http://technet.microsoft.com/security/bulletin/ms05-007
See also: Some details about MS05-007 security bulletin http://www.securityfocus.com/archive/1/389935
Vulnerability in Microsoft Office XP could allow Remote Code Execution (873352) http://technet.microsoft.com/security/bulletin/ms05-005
See also: Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031534.html
Vulnerability in the Indexing Service Could Allow Remote Code Execution (871250) http://technet.microsoft.com/security/bulletin/ms05-003
Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711) http://technet.microsoft.com/security/bulletin/ms05-002
See also: EEYE: Windows ANI File Parsing Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030780.html
Updated W98 patches released 12 Apr 05.
Vulnerability in HTML Help Could Allow Code Execution (890175) http://technet.microsoft.com/security/bulletin/ms05-001
See also: Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities http://www.securityfocus.com/archive/1/380096
Microsoft Help ActiveX Control Related Topics Local Content Accessing Vulnerability http://www.securityfocus.com/archive/1/382513
Internet Explorer Help ActiveX Control Local Zone Security Restriction Bypass Vulnerability (updated) http://www.securityfocus.com/archive/1/384937
YEY AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030268.html
(WXPSP2) Windows Firewall update available http://archives.neohapsis.com/archives/ntbugtraq/2004-q4/0149.html
See also http://support.microsoft.com/kb/886185
Vulnerabilities in Windows Kernel and LSASS Could Allow Elevation of Privilege (885835) http://technet.microsoft.com/security/bulletin/ms04-044
See also http://support.microsoft.com/kb/885835
[AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030725.html
[AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030726.html
Vulnerability in HyperTerminal Could Allow Code Execution (873339) http://technet.microsoft.com/security/bulletin/ms04-043
See also: HyperTerminal - Buffer Overflow In .ht File http://archives.neohapsis.com/archives/ntbugtraq/2004-q4/0150.html
Vulnerability in WordPad Could Allow Code Execution (885836) http://technet.microsoft.com/security/bulletin/ms04-041
See also: iDEFENSE Security Advisory 12.14.04 - Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability http://www.securityfocus.com/archive/1/384418
Cumulative Security Update for Internet Explorer (889293) http://technet.microsoft.com/security/bulletin/ms04-040
Out-of-monthly-cycle patch for IFRAME vulnerability?
See also (or use instead?) http://support.microsoft.com/kb/889669
Cumulative Security Update for Internet Explorer (834707) http://technet.microsoft.com/security/bulletin/ms04-038
See also: ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer http://archives.neohapsis.com/archives/ntbugtraq/2004-q4/0062.html
MSN Gaming Heartbeat Component Buffer Overflow http://www.securityfocus.com/archive/1/378324
MSN Heartbeat Control Buffer Overflow http://www.securityfocus.com/archive/1/387726
Address Bar Spoofing on Double Byte Character Set Locale Vulnerability (CAN-2004-0844) Patched in MS04-038 http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029552.html
Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a) http://www.securityfocus.com/archive/1/387727
Vulnerability in Windows Shell Could Allow Remote Code Execution (841356) http://technet.microsoft.com/security/bulletin/ms04-037
(WXP, W2k3) Vulnerability in Compressed (zipped) Folders Could Allow Remote Code Execution (873376) http://technet.microsoft.com/security/bulletin/ms04-034
See also: EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027449.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027472.html
Vulnerability in Microsoft Excel Could Allow Remote Code Execution (886836) http://technet.microsoft.com/security/bulletin/ms04-033
See also: Buffer Overflow In Microsoft Excel http://archives.neohapsis.com/archives/ntbugtraq/2004-q4/0065.html
Security Update for Microsoft Windows (840987) http://technet.microsoft.com/security/bulletin/ms04-032
See also: EEYE: Windows VDM #UD Local Privilege Escalation http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027448.html
SetWindowLong Shatter Attacks http://archives.neohapsis.com/archives/ntbugtraq/2004-q4/0066.html
Vulnerability in NetDDE Could Allow Remote Code Execution (841533) http://technet.microsoft.com/security/bulletin/ms04-031
See also: Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow http://www.securityfocus.com/archive/1/387994
(WNT) Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350) http://technet.microsoft.com/security/bulletin/ms04-029
See also: BindView Advisory: Memory Leak and DoS in NT4 RPC server http://www.securityfocus.com/archive/1/378277
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) http://technet.microsoft.com/security/bulletin/ms04-028
Updated 12 Oct 04 with correct installers for WinXP.
See also: Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0186.html
(GDI+) detection tool don't run without admin prevs. http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0190.html
SANS GDIscan http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026921.html
Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026454.html
JPEG Processing BOF Proof Of Concept http://www.securityfocus.com/archive/1/375431 http://www.securityfocus.com/archive/1/375536
Vulnerability in WordPerfect Converter Could Allow Code Execution (884933) http://technet.microsoft.com/security/bulletin/ms04-027
See also: Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0189.html
Microsoft WordPerfect 5.x Converter Heap Overflow http://www.securityfocus.com/archive/1/375436
WinXP users should install the SP2 update.
See the notes and FAQ on how to block automatic delivery via WU and AU.
See "EULA tidbits" in http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0094.html
SP2 and Sysprep http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0112.html
Flaws security feature of SP2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025349.html
Flaws in the new security functions of SP2 - revisited http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026073.html
Flaws in SP2 security features, part II http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028882.html
Warning: SP2 doesn't deploy silently with SUS http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0123.html http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0132.html
Microsoft Windows XP SP2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025513.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025521.html
WinXP SP2 hacks dial-up Internet users wide open? http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026544.html
Writing Trojans that bypass Windows XP Service Pack 2 Firewall http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027389.html
Hardware support for XP SP2 DEP not enabled by default ? http://www.securityfocus.com/archive/1/382002
HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! http://www.securityfocus.com/archive/1/384037
Cumulative Security Update for Internet Explorer (867801) http://technet.microsoft.com/security/bulletin/ms04-025
No Win98 patch yet.
See also: An update rollup is available ... http://support.microsoft.com/kb/871260
Vulnerability in Windows Shell Could Allow Remote Code Execution (839645) http://technet.microsoft.com/security/bulletin/ms04-024
See also: After you install Security Update 839645, you may experience sharing violations and increased network traffic under Windows XP http://support.microsoft.com/kb/871242
Vulnerability in HTML Help Could Allow Code Execution (840315) http://technet.microsoft.com/security/bulletin/ms04-023
See also: HtmlHelp - .CHM File Heap Overflow http://www.securityfocus.com/archive/1/368856
Vulnerability in Task Scheduler Could Allow Code Execution (841873) http://technet.microsoft.com/security/bulletin/ms04-022
See also: Microsoft Windows Task Scheduler '.job' Stack Overflow http://www.securityfocus.com/archive/1/368858
Unchecked buffer in mstask.dll http://www.securityfocus.com/archive/1/368857 http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023948.html
Hmm... should we drop all IconHandler from the registry? On Win2k, I copied cmd.exe (from winnt\system32) as xyz.pif; then (right-click) Properties, Program crashes explorer. Is this related to IconHandler, and is it exploitable?
Vulnerability in POSIX Could Allow Code Execution (841872) http://technet.microsoft.com/security/bulletin/ms04-020
Vulnerability in Utility Manager Could Allow Code Execution (842526) http://technet.microsoft.com/security/bulletin/ms04-019
See also: Microsoft Window Utility Manager Local Elevation of Privileges http://www.securityfocus.com/archive/1/368793
Cumulative Security Update for Outlook Express (823353) http://technet.microsoft.com/security/bulletin/ms04-018
Critical Update for Microsoft Data Access Components - Disable ADODB.Stream object from Internet Explorer (KB870669)
See:
How to disable the ADODB.Stream object from Internet Explorer http://support.microsoft.com/kb/870669
Microsoft Statement Regarding Configuration Change to Windows in Response to Download.Ject Security Issue http://www.microsoft.com/presspass/press/2004/jul04/07-02configchange.asp
This "fix" is useless as it can be circumvented and/or un-done, see:
Fix for IE ADODB.Stream vulnerability is out http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023392.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023397.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023400.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023403.html
Maybe(?) use sensible protection instead, see:
Registry Fix For Variant of Scob http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023443.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023534.html
Vulnerability in Crystal Reports Web Viewer could allow Information Disclosure and Denial of Service (842689) http://technet.microsoft.com/security/bulletin/ms04-017
Vulnerability in DirectPlay Could Allow Denial of Service (839643) http://technet.microsoft.com/security/bulletin/ms04-016
(WXP,W2k3) Vulnerability in Help and Support Center Could Allow Remote Code Execution (840374) http://technet.microsoft.com/security/bulletin/ms04-015
See also: MS04-015 - Windows Help Center - Dvdupgrade http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021221.html
Bug in XP Help and Support, or Don't Be Fooled By Disabled Services http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022422.html
Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution (837001) http://technet.microsoft.com/security/bulletin/ms04-014
Problems caused by patch (awaiting fix):
Ms Patch 837001 - problems? http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020204.html
After Ms patches last Wed ... http://www.securityfocus.com/archive/1/360462 http://www.securityfocus.com/archive/1/360648 http://www.securityfocus.com/archive/1/360633
Cumulative Security Update for Outlook Express (837009) http://technet.microsoft.com/security/bulletin/ms04-013
Note that you need this even if Outlook Express is not used as the default e-mail reader.
See also: AU-2004.007 -- AusCERT Update - Vulnerability in Internet Explorer Allows Program Execution http://www.auscert.org.au/3990
Microsoft Internet Explorer does not properly validate source of CHM components referenced by ITS protocol handlers http://www.kb.cert.org/vuls/id/323070
US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler http://www.us-cert.gov/cas/techalerts/TA04-099A.html
MHTML Redirection Leads to Downloading EXE and Executing http://www.securityfocus.com/archive/1/345615
IE 5.x-6.0 allows executing arbitrary programs using showHelp() http://www.securityfocus.com/archive/1/348521
Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658) http://www.securityfocus.com/archive/1/354447
New worm? http://www.securityfocus.com/archive/1/358862
Cumulative Update for Microsoft RPC/DCOM (828741) http://technet.microsoft.com/security/bulletin/ms04-012
See also: EEYE: Microsoft DCOM RPC Race Condition http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020067.html
EEYE: Microsoft DCOM RPC Memory Leak http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020071.html
Problems caused by patch (awaiting fix):
MS04-012 breaks AT command when managing NT 4.0 scheduler from XP PC http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0027.html
Security Update for Microsoft Windows (835732) http://technet.microsoft.com/security/bulletin/ms04-011
LSASS workaround create file %systemroot%\debug\dcpromo.log and make it read-only added 4 May 04. Is that sufficient to protect against Sasser?
See also: Microsoft Help and Support Center argument injection vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020065.html iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Support Center Argument Injection Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020063.html
EEYE: Windows Expand-Down Data Segment Local Privilege Escalation http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html
EEYE: Windows Local Security Authority Service Remote Buffer Overflow http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020069.html
EEYE: Windows VDM TIB Local Privilege Escalation http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html
NSFOCUS SA2004-01 : DoS Vulnerability in Microsoft Windows SPNEGO Protocol Decoding http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020080.html
Utility Manager - Failure to drop system privileges http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020137.html
[SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020179.html
Potential Microsoft PCT worm (MS04-011) http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020473.html
New Worm??? - High level of activity on port 445 http://www.securityfocus.com/archive/1/361756
A technical description of the SSL PCT vulnerability (CVE-2003-0719) http://www.securityfocus.com/archive/1/361836
SSL PCT vulnerability information http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020784.html
Sasser Worm Analysis - LURHQ http://www.lurhq.com/sasser.html
Problems caused by patch (awaiting fix):
http://support.microsoft.com/kb/835732
I have a report that a "CPU at 99%" problem may be solved by setting CacheLimit to 1024 (hex 400) in (both?) [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Content]
MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003 http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020246.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020265.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020269.html
Vulnerability in MSN Messenger Could Allow Information Disclosure (838512) http://technet.microsoft.com/security/bulletin/ms04-010
Vulnerability in Microsoft Outlook Could Allow Code Execution (828040) http://technet.microsoft.com/security/bulletin/ms04-009
Update 10 Mar 04: workaround was bogus, severity upped to critical.
The patch also seems to be contained in Office XP Service Pack 3 http://support.microsoft.com/kb/832671
See also: iDEFENSE Security Advisory 03.09.04: Microsoft Outlook "mailto:" Parameter Passing Vulnerability http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018452.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018594.html
Outlook mailto: URL argument injection vulnerability http://www.securityfocus.com/archive/1/356901
(W2k) Vulnerability in Windows Media Services Could Allow a Denial of Service (832359) http://technet.microsoft.com/security/bulletin/ms04-008
ASN.1 Vulnerability Could Allow Code Execution (828028) http://technet.microsoft.com/security/bulletin/ms04-007
See also:
EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption http://www.securityfocus.com/archive/1/353320
EEYE: Microsoft ASN.1 Library Bit String Heap Corruption http://www.securityfocus.com/archive/1/353323
Note Win98 is also vulnerable: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017479.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017515.html
Vulnerability in the Windows Internet Naming Service (WINS) Could Allow Code Execution (830352) http://technet.microsoft.com/security/bulletin/ms04-006
Cumulative Security Update for Internet Explorer (832894) http://technet.microsoft.com/security/bulletin/ms04-004
Update 12 Feb 04: IE6SP1 needs also http://support.microsoft.com/kb/831167.
See also: http://support.microsoft.com/kb/834489 http://archives.neohapsis.com/archives/ntbugtraq/2004-q1/0075.html
Sandblad #12: Inject javascript url in history list (revisited) http://www.securityfocus.com/archive/1/352460
MS to stop allowing passwords in URLs http://www.securityfocus.com/archive/1/352469
ASPR #2004-01-20-1: Internet Explorer/Outlook double null character DoS http://www.securityfocus.com/archive/1/353285
Buffer Overrun in MDAC Function Could Allow Code Execution (832483) http://technet.microsoft.com/security/bulletin/ms04-003
See also: Microsoft Security Bulletin MS04-003 - perceived problems http://archives.neohapsis.com/archives/ntbugtraq/2004-q1/0016.html
MDAC Patch Installation Mystery http://archives.neohapsis.com/archives/ntbugtraq/2004-q1/0018.html
Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (813360) http://technet.microsoft.com/security/bulletin/ms03-051
Re-released 10 Feb 04 saying Office2000 is also affected.
Microsoft Security Bulletin MS03-043/049 W2K anomollies http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0189.html
Microsoft Security Bulletin MS03-049 - Installation problems? http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0191.html
See also: Frontpage Extensions Remote Command Execution http://www.securityfocus.com/archive/1/344221 http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013736.html
Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run (831527) http://technet.microsoft.com/security/bulletin/ms03-050
Buffer Overrun in the Workstation Service Could Allow Code Execution (828749) http://technet.microsoft.com/security/bulletin/ms03-049
See also: Microsoft Security Bulletin MS03-049 - Installation problems? http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0180.html http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0183.html http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0200.html
EEYE: Windows Workstation Service Remote Buffer Overflow http://www.securityfocus.com/archive/1/344137
[CORE-2003-12-05] DCE RPC Vulnerabilities New Attack Vectors Analysis http://www.securityfocus.com/archive/1/347193 (noting that this affects MS03-043 MS03-039 MS03-026 MS03-001 also)
Cumulative Security Update for Internet Explorer (824145) http://technet.microsoft.com/security/bulletin/ms03-048
See also: Bugs, Old File Dates in New Microsoft Patches http://www.eweek.com/print_article/0,3048,a=112332,00.asp
Certificate Validation Flaw Could Enable Identity Spoofing (Q328145) http://technet.microsoft.com/security/bulletin/ms02-050
Re-released with new content, and new KB number Q329115, 20 Nov 02.
Re-released with new W2k SP4 patch 12 Nov 03.
Patches ms03-041 to ms03-045 re-released 23 Oct 03, with a working update.exe installer. Or was it ms03-042, -043 and -045 only, on 30 Oct 03?
Windows Product Updates May Stop Responding or May Use Most or All the CPU Resources http://support.microsoft.com/kb/830846
Issues with MS03-043 http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0091.html http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0096.html
Anyone running SUS see the content update today? http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012574.html
Buffer Overrun in the ListBox and in the ComboBox Control Could Allow Code Execution (824141) http://technet.microsoft.com/security/bulletin/ms03-045
Re-released 22 Oct 03 with correct non-English versions.
Noted on 4 Nov 03 that it supercedes MS02-071.
See also: Patch MS03-045 for Czech W2K has conflicting kernel32.dll http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0072.html
New Microsoft security bulletins today http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012170.html http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012200.html http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012215.html
Listbox And Combobox Control Buffer Overflow http://www.securityfocus.com/archive/1/341454
MS03-045 or Q824141 http://archives.neohapsis.com/archives/ntbugtraq/2004-q1/0072.html
Buffer Overrun in Windows Help and Support Center Could Lead to System Compromise (825119) http://technet.microsoft.com/security/bulletin/ms03-044
Buffer Overrun in Messenger Service Could Allow Code Execution (828035) http://technet.microsoft.com/security/bulletin/ms03-043
Re-released 14 Nov 03 so WinXP would be patched correctly.
See also: MS03-043 Popup Messenger Servce buffer-overflow http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0077.html
(W2k) Buffer Overflow in Windows Troubleshooter ActiveX Control Could Allow Code Execution (826232) http://technet.microsoft.com/security/bulletin/ms03-042
See also: Microsoft Local Troubleshooter ActiveX control buffer overflow http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012205.html
Vulnerability in Authenticode Verification Could Allow Remote Code Execution (823182) http://technet.microsoft.com/security/bulletin/ms03-041
See also: Problems with windows update installing KB823182 on NT4 Server http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0244.html
See also: Microsoft PCHealth 2003/XP Buffer Overflow (#NISR15102003) http://www.securityfocus.com/archive/1/341450
Update for Windows Media Player Script Commands http://support.microsoft.com/kb/828026
Referenced in MS03-040, to fix the "URL flip" exploits: why does not it deserve a security bulletin?
Cumulative Patch for Internet Explorer (828750) http://technet.microsoft.com/security/bulletin/ms03-040
The "Level1Add" Registry Key Is Missing from Outlook 2002 http://support.microsoft.com/kb/312834
See also: http://support.microsoft.com/kb/290497
(This is all old info, I just missed it somehow...)
Buffer Overrun In RPCSS Service Could Allow Code Execution (824146) http://technet.microsoft.com/security/bulletin/ms03-039
This second try (after MS03-026) still does not seem to work:
Bad news on RPC DCOM vulnerability http://www.securityfocus.com/archive/1/340937 http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011898.html
AL-2003.20 Microsoft RPC Race Condition Denial of Service http://www.auscert.org.au/3532
Microsoft Windows DCOM/RPC vulnerability http://www.kb.cert.org/vuls/id/547820
See also:
EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II http://www.securityfocus.com/archive/1/337008
NSFOCUS SA2003-06 : Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability http://archives.neohapsis.com/archives/ntbugtraq/2003-q3/0234.html
Scanning Tool to Identify Host Computers That Do Not Have the 823980 (MS03-026) and the 824146 (MS03-039) Security Patches Installed http://support.microsoft.com/kb/827363
Unchecked buffer in Microsoft Access Snapshot Viewer Could Allow Code Execution (827104) http://technet.microsoft.com/security/bulletin/ms03-038
Flaw in Visual Basic for Applications Could Allow Arbitrary Code execution (822715) http://technet.microsoft.com/security/bulletin/ms03-037
See also:
EEYE: VBE Document Property Buffer Overflow http://www.securityfocus.com/archive/1/336027
Buffer Overrun in WordPerfect Converter Could Allow Code Execution (827103) http://technet.microsoft.com/security/bulletin/ms03-036
See also:
EEYE: Microsoft WordPerfect Document Converter Buffer Overflow http://www.securityfocus.com/archive/1/336018
Flaw in Microsoft Word Could Enable Macros to Run Automatically (827653) http://technet.microsoft.com/security/bulletin/ms03-035
Flaw in NetBIOS Could Lead to Information Disclosure (824105) http://technet.microsoft.com/security/bulletin/ms03-034
Unchecked Buffer in MDAC Function Could Enable System Compromise (823718) http://technet.microsoft.com/security/bulletin/ms03-033
Cumulative Patch for Internet Explorer (822925) http://technet.microsoft.com/security/bulletin/ms03-032
Updated 8 Sep 03: problems acknowledged, investigating, will re-issue... Superceded by MS03-040 on 4 Oct 03.
See also: http://www.kb.cert.org/vuls/id/865940
See also: DNS/Hosts file issues http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0007.html
See also:
EEYE: Internet Explorer Object Data Remote Execution Vulnerability http://www.securityfocus.com/archive/1/334405
[SNS Advisory No.67] The Return of the Content-Disposition Vulnerability in IE http://www.securityfocus.com/archive/1/334358
Re: Alert: Microsoft Security Bulletin - MS03-032 http://archives.neohapsis.com/archives/ntbugtraq/2003-q3/0197.html
BAD NEWS: Microsoft Security Bulletin MS03-032 http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009639.html http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009658.html http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009665.html http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009671.html
Unchecked Buffer in DirectX Could Enable System Compromise (819696) http://technet.microsoft.com/security/bulletin/ms03-030
See also:
EEYE: Windows MIDI Decoder (QUARTZ.DLL) Heap Corruption http://www.securityfocus.com/archive/1/330181
http://www.cert.org/advisories/CA-2003-18.html
Patches for more DirectX versions added 20 Aug 03.
(WNT) Flaw in Windows Function Could Allow Denial of Service (823803) http://technet.microsoft.com/security/bulletin/ms03-029
See also:
MS03-029 / Q823803 and RRAS Problems [im] http://www.securityfocus.com/archive/1/330916
Re-released to correct RAS on 14 Aug 03.
(WXP) Unchecked Buffer in Windows Shell Could Enable System Compromise (821557) http://technet.microsoft.com/security/bulletin/ms03-027
Buffer Overrun In RPC Interface Could Allow Code Execution (823980) http://technet.microsoft.com/security/bulletin/ms03-026
Note 11 Sep 03: Superceded by MS03-039.
See also:
[LSD] Critical security vulnerability in Microsoft Operating Systems http://www.securityfocus.com/archive/1/329516 http://www.securityfocus.com/archive/1/329668
Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability http://www.securityfocus.com/archive/1/329755 http://www.securityfocus.com/archive/1/329957
RPC DCOM still vulnerable even after applying patches http://archives.neohapsis.com/archives/ntbugtraq/2003-q3/0070.html http://www.securityfocus.com/archive/1/330886
DCOM Exploit MS03-026 attack vectors http://lists.grok.org.uk/pipermail/full-disclosure/2003-August/007449.html
Scanning Tool to Identify Host Computers That Do Not Have the 823980 Security Patch (MS03-026) Installed http://support.microsoft.com/kb/826369
(W2k) Flaw in Windows Message Handling through Utility Manager Could Enable Privilege Elevation (822679) http://technet.microsoft.com/security/bulletin/ms03-025
Buffer Overrun in Windows Could Lead to Data Corruption (817606) http://technet.microsoft.com/security/bulletin/ms03-024
Note thanks to Samba team!
Buffer Overrun In HTML Converter Could Allow Code Execution (823559) http://technet.microsoft.com/security/bulletin/ms03-023
(W2k) If you are using Windows 2000 then you should install Service Pack 4. See the release notes at http://support.microsoft.com/kb/813432, and the list of included (security) patches at http://www.microsoft.com/technet/security/news/w2kSP4.asp or http://support.microsoft.com/kb/327194
See also:
What Win2k SP4 doesn't fix (security), but says it does... http://www.securityfocus.com/archive/1/328233
Flaw In Windows Media Player May Allow Media Library Access (819639) http://technet.microsoft.com/security/bulletin/ms03-021
Cumulative Patch for Internet Explorer (818529) http://technet.microsoft.com/security/bulletin/ms03-020
Flaw in Windows Media Player Skins Downloading could allow Code Execution (817787) http://technet.microsoft.com/security/bulletin/ms03-017
Cumulative Patch for Internet Explorer (813489) http://technet.microsoft.com/security/bulletin/ms03-015
Cumulative Patch for Outlook Express (330994) http://technet.microsoft.com/security/bulletin/ms03-014
See also: MS update 330994 http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015166.html
Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493) http://technet.microsoft.com/security/bulletin/ms03-013
Updated WinXP SP1 patch added 28 May 03.
Flaw in Microsoft VM Could Enable System Compromise (816093) http://technet.microsoft.com/security/bulletin/ms03-011
Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks (331953) http://technet.microsoft.com/security/bulletin/ms03-010
Interesting how WinNT is affected but cannot be patched.
In fact you need instead (or also?) "private patch" 814408, see:
Re: Alert: Microsoft Security Bulletin - MS03-010 http://archives.neohapsis.com/archives/ntbugtraq/2003-q2/0058.html http://archives.neohapsis.com/archives/ntbugtraq/2003-q2/0064.html http://archives.neohapsis.com/archives/ntbugtraq/2003-q2/0070.html
Or is it really 814119 that you need (released 13 May 03)?
Flaw in Windows Script Engine could allow code execution (814078) http://technet.microsoft.com/security/bulletin/ms03-008
(W2k) Unchecked buffer in Windows component could cause web server compromise (815021) http://technet.microsoft.com/security/bulletin/ms03-007
Description updated 18 Mar 03 with details when patch may not work.
WinNT patch added 23 Apr 03.
WinXP patch added 28 May 03.
Install this even if not running IIS: ntdll.dll is a core operating system DLL that exports hundreds of functions for Win32 API programmers to use, and is most likely used by every process running on a Windows 2000 system.
See also:
New attack vectors and a vulnerability dissection of MS03-007 http://www.securityfocus.com/archive/1/315845
(Wme) Flaw in Windows Me Help and Support Center Could Enable Code Execution (812709) http://technet.microsoft.com/security/bulletin/ms03-006
See also:
MS-Windows ME IE/Outlook/HelpCenter critical vulnerability http://www.securityfocus.com/archive/1/313362 http://www.securityfocus.com/archive/1/313425
(WXP) Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) http://technet.microsoft.com/security/bulletin/ms03-005
Cumulative Patch for Internet Explorer (810847) http://technet.microsoft.com/security/bulletin/ms03-004
Re-released 12 Feb 03: also need hotfixes 813951 and 331906.
Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure (812262) http://technet.microsoft.com/security/bulletin/ms03-003
Unchecked Buffer in Locator Service Could Lead to Code Execution (810833) http://technet.microsoft.com/security/bulletin/ms03-001
(WXP) Unchecked Buffer in Windows Shell Could Enable System Compromise (329390) http://technet.microsoft.com/security/bulletin/ms02-072
Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation (328310) http://technet.microsoft.com/security/bulletin/ms02-071
See also:
A patch for "Windows WM_TIMER Message Handling flaw" causes random crashes on Windows NT http://www.securityfocus.com/archive/1/306436
WinNT patch pulled out on 3 Feb 03 as it causes crashes; patch re-released on 7 Feb 03.
MS Security Bulletin MS02-071 changes group policies http://archives.neohapsis.com/archives/ntbugtraq/2003-q1/0079.html
Flaw in SMB Signing Could Enable Group Policy to be Modified (309376) http://technet.microsoft.com/security/bulletin/ms02-070
Re-released with WXP patches on 22 Jan 03.
Flaw in Microsoft VM Could Enable System Compromise (810030) http://technet.microsoft.com/security/bulletin/ms02-069
Note KB article 313191 how WindowsUpdate does not work on WinNT, and the complex procedures a WinNT user must follow to download the VM patch.
Cumulative Patch for Internet Explorer (324929) http://technet.microsoft.com/security/bulletin/ms02-068
See also:
Notes on MS02-068, extensive downplaying of severity http://www.securityfocus.com/archive/1/302174
Security rating and impacts revised on 6 Dec 02; pointer to KB article 810687 added or emphasized (seems we need that too).
E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail (331866) http://technet.microsoft.com/security/bulletin/ms02-067
Cumulative Patch for Internet Explorer (Q328970) http://technet.microsoft.com/security/bulletin/ms02-066
Does not seem to include ms02-065.
Re-released, with (broken) pointer to KB article 810687 on 25 Nov 02: need that even after the patch?
Severity rating revised on 13 Dec 02 (after superceded by ms02-068)
See also:
Re: MS02-066 - fixes, gaps and incorrect statements http://www.securityfocus.com/archive/1/300977
Buffer Overrun in Microsoft Data Access Components Could Lead to Code Execution (Q329414) http://technet.microsoft.com/security/bulletin/ms02-065
Note the caveat: ... a patched system could be made vulnerable again [by] visit a web site or open an HTML mail ...
Note the workaround: make sure you have no trusted publishers, including Microsoft.
Windows 2000 Default Permissions Could Allow Trojan Horse Program (Q327522) http://technet.microsoft.com/security/bulletin/ms02-064
Unchecked Buffer in PPTP Implementation Could Enable Denial of Service Attacks (Q329834) http://technet.microsoft.com/security/bulletin/ms02-063
(WXP) Flaw in Windows XP Help and Support Center Could Enable File Deletion (Q328940) http://technet.microsoft.com/security/bulletin/ms02-060
Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure (Q330008) http://technet.microsoft.com/security/bulletin/ms02-059
Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise (Q328676) http://technet.microsoft.com/security/bulletin/ms02-058
Flaw in Services for Unix 3.0 Interix SDK Could Allow Code Execution (Q329209) http://technet.microsoft.com/security/bulletin/ms02-057
Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255) http://technet.microsoft.com/security/bulletin/ms02-055
(W98, WXP) Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048) http://technet.microsoft.com/security/bulletin/ms02-054
Flaw in Microsoft VM JDBC Classes Could Allow Code Execution (Q329077) http://technet.microsoft.com/security/bulletin/ms02-052
See also: http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001276.html http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001703.html
(W2k) Cryptographic Flaw in RDP Protocol can Lead to Information Disclosure (Q324380) http://technet.microsoft.com/security/bulletin/ms02-051
Internet Explorer 6 Service Pack 1 released on 9 Sep 02: http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.asp
(Why no security bulletin?)
See also (USyd users in particular!):
IE proxy authentication problem and a hotfix http://mailman.ucc.usyd.edu.au/pipermail/its-contacts/2003-April/000375.html http://support.microsoft.com/kb/331906
Flaw Could Enable Web Page to Launch Visual FoxPro 6.0 Application Without Warning (Q326568) http://technet.microsoft.com/security/bulletin/ms02-049
Flaw in Certificate Enrollment Control Could Allow Deletion of Digital Certificates (Q323172) http://technet.microsoft.com/security/bulletin/ms02-048
Cumulative Patch for Internet Explorer (Q323759) http://technet.microsoft.com/security/bulletin/ms02-047
Buffer Overrun in TSAC ActiveX Control Could Allow Code Execution (Q327521) http://technet.microsoft.com/security/bulletin/ms02-046
(W2k) Unchecked Buffer in Network Share Provider Can Lead to Denial of Service (Q326830) http://technet.microsoft.com/security/bulletin/ms02-045
Unsafe Functions in Office Web Components (Q328130) http://technet.microsoft.com/security/bulletin/ms02-044
(W2k) Flaw in Network Connection Manager Could Enable Privilege Elevation (Q326886) http://technet.microsoft.com/security/bulletin/ms02-042
(W2k) If you are using Windows 2000 then you should install Service Pack 3. See the list of included security patches at http://www.microsoft.com/technet/security/news/w2ksp3.asp or http://support.microsoft.com/kb/320853
(Patches for MS Office, Media Player, or Internet Explorer 5.5 or later, are not included; seems all other patches below are included.)
BEWARE new privacy issues, see http://www.securityfocus.com/archive/1/285638
With SP3, you can "hide" IE, OE and WMP, see http://support.microsoft.com/kb/324644
Cumulative Patch for Windows Media Player (Q320920) http://technet.microsoft.com/security/bulletin/ms02-032
Re-released with missing patch on 24 Jul 02.
Cumulative Patches for Excel and Word for Windows (Q324458) http://technet.microsoft.com/security/bulletin/ms02-031
(W2k) Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution (Q318138) http://technet.microsoft.com/security/bulletin/ms02-029
Re-released with new patches (to correct VPN) on 2 Jul 02.
See also:
Re: VPN and Q318138--Workaround http://archives.neohapsis.com/archives/ntbugtraq/2002-q2/0148.html
Unchecked Buffer in Gopher Protocol Handler Can Run Code of Attacker's Choice (Q323889) http://technet.microsoft.com/security/bulletin/ms02-027
Just workaround instructions on 12 Jun 02; patch in ms02-047.
See also:
Flawed workaround in MS02-027 -- gopher can run on _any_ port, not just 70 http://www.securityfocus.com/archive/1/276848
Unchecked Buffer in MSN Chat Control Can Lead to Code Execution (Q321661) http://technet.microsoft.com/security/bulletin/ms02-022
Re-released with new patches on 11 Jun 02.
(W2k) Authentication Flaw in Windows Debugger can Lead to Elevated Privileges (Q320206) http://technet.microsoft.com/security/bulletin/ms02-024
15 May 2002 Cumulative Patch for Internet Explorer (Q321232) http://technet.microsoft.com/security/bulletin/ms02-023
See also:
MS02-023 does not patch actual issue! http://www.securityfocus.com/archive/1/272689
Update and comments on the MS02-023 patch, holes still remain http://www.securityfocus.com/archive/1/272695 http://www.securityfocus.com/archive/1/272883
MS02-023 Patch Breaks JAVASCRIPT http://archives.neohapsis.com/archives/ntbugtraq/2002-q2/0106.html
Outlook E-mail Attachment Security Update:
OL98: http://support.microsoft.com/kb/262617
OL2000: http://support.microsoft.com/kb/262631
See also:
Outlook Security Features http://www.microsoft.com/office/outlook/evaluation/security.asp
Downloads for Outlook Users http://www.microsoft.com/office/outlook/downloads/
(This is all old info, I just missed it somehow...)
E-mail Editor Flaw Could Lead to Script Execution on Reply or Forward (Q321804) http://technet.microsoft.com/security/bulletin/ms02-021
(W2k) Q311967: Unchecked buffer in the Multiple UNC Provider Could Enable Code Execution http://technet.microsoft.com/security/bulletin/ms02-017
See also:
Re: NSFOCUS SA2002-02 : Microsoft Windows MUP overlong request kernel overflow http://www.securityfocus.com/archive/1/268644
(W2k) Q318593: Opening Group Policy Files for Exclusive Read Blocks Policy Application http://technet.microsoft.com/security/bulletin/ms02-016
28 March 2002 Cumulative Patch for Internet Explorer http://technet.microsoft.com/security/bulletin/ms02-015
Cumulative: bah... fine print changed later to say that ms02-009 is not included.
See also:
IE: Remote webpage can script in local zone http://www.securityfocus.com/archive/1/265459
MS02-015 (Q319182) breaks intranet cookies http://archives.neohapsis.com/archives/ntbugtraq/2002-q2/0027.html
Unchecked Buffer in Windows Shell Could Lead to Code Execution http://technet.microsoft.com/security/bulletin/ms02-014
Java Applet Can Redirect Browser Traffic http://technet.microsoft.com/security/bulletin/ms02-013
Unchecked Buffer in ISAPI Filter Could Allow Commerce Server Compromise http://technet.microsoft.com/security/bulletin/ms02-010
Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files http://technet.microsoft.com/security/bulletin/ms02-009
XMLHTTP Control Can Allow Access to Local Files http://technet.microsoft.com/security/bulletin/ms02-008
Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run http://technet.microsoft.com/security/bulletin/ms02-006 (SNMP is not installed or running by default, so may not need patching. Except on Dell servers where it is on in the OEM media...)
11 February 2002 Cumulative Patch for Internet Explorer http://technet.microsoft.com/security/bulletin/ms02-005
(W2k) Unchecked Buffer in Telnet Server Could Lead to Arbitrary Code Execution: http://technet.microsoft.com/security/bulletin/ms02-004
(W2k) Windows 2000 Security Rollup Package 1 Now Available: http://www.microsoft.com/technet/security/news/w2ksrp1.asp
This is documented not to contain patches that were delivered after MS01-052, later changed (?!) to MS01-022 and after MS02-004 with the exception of MS02-011 (and may have missed others). It is recommended anyway, as it seems to contain other (undocumented) patches e.g. Q300367 .
(W2k) Trusting Domains Do Not Verify Domain Membership of SIDs in Authorization Data: http://technet.microsoft.com/security/bulletin/ms02-001
(W98,XP) Unchecked Buffer in Universal Plug and Play can Lead to System Compromise: http://technet.microsoft.com/security/bulletin/ms01-059
13 December 2001 Cumulative Patch for IE: http://technet.microsoft.com/security/bulletin/ms01-058
Windows Media Player .ASF Processor Contains Unchecked Buffer: http://technet.microsoft.com/security/bulletin/ms01-056
Cookie Data in IE Can Be Exposed or Altered Through Script Injection: http://technet.microsoft.com/security/bulletin/ms01-055
See also:
Re: Microsoft IE cookies readable via about: URLS http://www.securityfocus.com/archive/1/225567 and http://www.securityfocus.com/archive/1/240091
Re: Microsoft Security Bulletin MS01-055 http://www.securityfocus.com/archive/1/234674
(W98,XP) Invalid Universal Plug and Play Request can Disrupt System Operation: http://technet.microsoft.com/security/bulletin/ms01-054
(W2k) Invalid RDP Data can Cause Terminal Service Failure: http://technet.microsoft.com/security/bulletin/ms01-052
Malformed Dotless IP Address Can Cause Web Page to be Handled in Intranet Zone: http://technet.microsoft.com/security/bulletin/ms01-051
Malformed Excel or PowerPoint Document Can Bypass Macro Security: http://technet.microsoft.com/security/bulletin/ms01-050
Windows Media Player .NSC Processor Contains Unchecked Buffer: http://technet.microsoft.com/security/bulletin/ms01-042
(W2k) Malformed RPC Request Can Cause Service Failure: http://technet.microsoft.com/security/bulletin/ms01-041
Outlook View Control Exposes Unsafe Functionality: http://technet.microsoft.com/security/bulletin/ms01-038
(W2k) Authentication Error in SMTP Service Could Allow Mail Relaying: http://technet.microsoft.com/security/bulletin/ms01-037
Malformed Word Document Could Enable Macro to Run Automatically: http://technet.microsoft.com/security/bulletin/ms01-034
(W2k) Unchecked Buffer in Index Server ISAPI Extension Could Enable Web Server Compromise: http://technet.microsoft.com/security/bulletin/ms01-033
(W2k) Predictable Name Pipes Could Enable Privilege Elevation via Telnet: http://technet.microsoft.com/security/bulletin/ms01-031
Incorrect Attachment Handling in Exchange 2000 OWA Can Execute Script: http://technet.microsoft.com/security/bulletin/ms01-030
HyperTerminal Buffer Overflow: http://technet.microsoft.com/security/bulletin/ms00-079
[Re-release with new content]
Windows Media Player .ASX Processor Contains Unchecked Buffer: http://technet.microsoft.com/security/bulletin/ms01-029
RTF document linked to template can run macros without warning: http://technet.microsoft.com/security/bulletin/ms01-028
Flaws in Web Server Certificate Validation Could Enable Spoofing: http://technet.microsoft.com/security/bulletin/ms01-027
WebDAV Service Provider Can Allow Scripts to Levy Requests as User: http://technet.microsoft.com/security/bulletin/ms01-022
(W2k) If you are using Windows 2000 then you should install Service Pack 2. See the list of included security patches at http://www.microsoft.com/technet/security/news/w2ksp2.asp or http://support.microsoft.com/kb/298193 and note that many (but not all: e.g. MS01-007 and MS00-029!) of the patches below are included. (Patches for MS Office, Media Player, or Internet Explorer 5.5 or later, are not included.) From this point I will try and also include Windows 2000 patches, and mark those that are relevant only to Windows 98 or to Windows 2000. (BEWARE: Up until here I skipped patches that were just for Windows 2000.)
Incorrect MIME Header Can Cause IE to Execute E-mail Attachment: http://technet.microsoft.com/security/bulletin/ms01-020
Passwords for Compressed Folders are Recoverable: http://technet.microsoft.com/security/bulletin/ms01-019
Erroneous VeriSign-Issued Digital Certificates Pose Spoofing Hazard: http://technet.microsoft.com/security/bulletin/ms01-017
IE can Divulge Location of Cached Content: http://technet.microsoft.com/security/bulletin/ms01-015
[Got to love that obfuscated wording...]
Outlook, Outlook Express Vcard Handler Contains Unchecked Buffer: http://technet.microsoft.com/security/bulletin/ms01-012
Windows Media Player Skins File Download: http://technet.microsoft.com/security/bulletin/ms01-010
(W2k) Network DDE Agent Requests can Enable Code to run in System Context: http://technet.microsoft.com/security/bulletin/ms01-007
PowerPoint File Parsing: http://technet.microsoft.com/security/bulletin/ms01-002
Web Client NTLM Authentication: http://technet.microsoft.com/security/bulletin/ms01-001
Browser Print Template, File Upload via Form: http://technet.microsoft.com/security/bulletin/ms00-093
Incomplete TCP/IP Packet: http://technet.microsoft.com/security/bulletin/ms00-091
Windows Media Player .ASX Buffer Overrun and .WMS Script Execution: http://technet.microsoft.com/security/bulletin/ms00-090
New Variant of VM File Reading: http://technet.microsoft.com/security/bulletin/ms00-081
HyperTerminal Buffer Overflow: http://technet.microsoft.com/security/bulletin/ms00-079
Cached Web Credentials: http://technet.microsoft.com/security/bulletin/ms00-076
Microsoft VM ActiveX Component (includes Java VM Applet MS00-059): http://technet.microsoft.com/security/bulletin/ms00-075
Malformed IPX NMPI Packet: http://technet.microsoft.com/security/bulletin/ms00-073
Share Level Password: http://technet.microsoft.com/security/bulletin/ms00-072
Word Mail Merge: http://technet.microsoft.com/security/bulletin/ms00-071
OCX Attachment: http://technet.microsoft.com/security/bulletin/ms00-068
Money Password: http://technet.microsoft.com/security/bulletin/ms00-061
Scriptlet Rendering (includes IE Script part of MS00-049; SSL Certificate Validation MS00-039; Frame Domain, Cookie Access etc MS00-033; for IE5.5 includes also Active Setup Download MS00-042): http://technet.microsoft.com/security/bulletin/ms00-055
Office HTML Object Tag: http://technet.microsoft.com/security/bulletin/ms00-056
Excel REGISTER.ID Function: http://technet.microsoft.com/security/bulletin/ms00-051
Cache Bypass (MS00-046), Persistent Mail-Browser Link (MS00-045), Malformed E-mail Header (MS00-043) share the same patch: http://technet.microsoft.com/security/bulletin/ms00-046 http://technet.microsoft.com/security/bulletin/ms00-045 http://technet.microsoft.com/security/bulletin/ms00-043
Office HTML Script: http://technet.microsoft.com/security/bulletin/ms00-049
Active Setup Download: http://technet.microsoft.com/security/bulletin/ms00-042
SSL Certificate Validation (includes MS00-033: Frame Domain, Cookie Access etc): http://technet.microsoft.com/security/bulletin/ms00-039
HTML Help File Code Execution: http://technet.microsoft.com/security/bulletin/ms00-037

Computer Browser protocol: http://technet.microsoft.com/security/bulletin/ms00-036
But there is no Win98 patch! Looking in the FAQ http://www.microsoft.com/technet/security/bulletin/fq00-036.mspx and the KB article http://support.microsoft.com/kb/262694 ( http://support.microsoft.com/kb/263307 is useless), it seems we need to create the registry keys:

Hive	HKEY_LOCAL_MACHINE\SYSTEM
Key	CurrentControlSet\Services\MrxSmb\Parameters
Name	RefuseReset
Value Type	DWORD
Default Value	None (ResetBrowser frames are accepted)
... but set to	0x01 to ignore ResetBrowser frames

Hive HKEY_LOCAL_MACHINE\SYSTEM

Key CurrentControlSet\Services\MrxSmb\Parameters

Name MaximumBrowseEntries

Value Type DWORD

Default Value 100000

... but set to 1 or 0 (?)

Use regedit to create those two keys; this may not be effective on Win98 (it does not seem to have Mrxsmb.sys or Rdr.sys files).

IP Fragment Reassembly: http://technet.microsoft.com/security/bulletin/ms00-029
Office 2000 UA Control: http://technet.microsoft.com/security/bulletin/ms00-034
XLM Text Macro: http://technet.microsoft.com/security/bulletin/ms00-022
DOS Device in Path Name: http://technet.microsoft.com/security/bulletin/ms00-017
See also: http://www.securityfocus.com/archive/1/195294 http://www.securityfocus.com/archive/1/195453
Clip Art Buffer Overrun: http://technet.microsoft.com/security/bulletin/ms00-015
VM File Reading: http://technet.microsoft.com/security/bulletin/ms00-011
Image Source Redirect: http://technet.microsoft.com/security/bulletin/ms00-009
Malformed RTF Control Word: http://technet.microsoft.com/security/bulletin/ms00-005
Malformed Conversion Data: http://technet.microsoft.com/security/bulletin/ms00-002
Server-side Page Reference Redirect: http://technet.microsoft.com/security/bulletin/ms99-050
WPAD Spoofing: http://technet.microsoft.com/security/bulletin/ms99-054
Legacy Credential Caching: http://technet.microsoft.com/security/bulletin/ms99-052
IE Task Scheduler: http://technet.microsoft.com/security/bulletin/ms99-051
File Access URL: http://technet.microsoft.com/security/bulletin/ms99-049
Active Setup Control: http://technet.microsoft.com/security/bulletin/ms99-048
Virtual Machine Verifier: http://technet.microsoft.com/security/bulletin/ms99-045
Excel SYLK: http://technet.microsoft.com/security/bulletin/ms99-044
Javascript Redirect: http://technet.microsoft.com/security/bulletin/ms99-043
IFRAME ExecCommand: http://technet.microsoft.com/security/bulletin/ms99-042
Spoofed Route Pointer: http://technet.microsoft.com/security/bulletin/ms99-038
ImportExportFavorites: http://technet.microsoft.com/security/bulletin/ms99-037
Malformed Telnet Argument: http://technet.microsoft.com/security/bulletin/ms99-033
Fragmented IGMP Packet: http://technet.microsoft.com/security/bulletin/ms99-034
scriptlet.typelib/Eyedog: http://technet.microsoft.com/security/bulletin/ms99-032
Virtual Machine Sandbox: http://technet.microsoft.com/security/bulletin/ms99-031
Office ODBC Vulnerabilities: http://technet.microsoft.com/security/bulletin/ms99-030
Malformed Favorites Icon: http://technet.microsoft.com/security/bulletin/ms99-018
Excel 97 Virus Warning Vulnerabilities: http://technet.microsoft.com/security/bulletin/ms99-014
MSHTML Update Available for Internet Explorer: http://technet.microsoft.com/security/bulletin/ms99-012
DHTML Edit: http://technet.microsoft.com/security/bulletin/ms99-011
Taskpads Scripting: http://technet.microsoft.com/security/bulletin/ms99-007
Word 97 Template: http://technet.microsoft.com/security/bulletin/ms99-002
Exposure in Forms 2.0 TextBox Control that allows data to be read from user's Clipboard: http://technet.microsoft.com/security/bulletin/ms99-001
Frame Spoof: http://technet.microsoft.com/security/bulletin/ms98-020
Excel CALL: http://technet.microsoft.com/security/bulletin/ms98-018
Dotless IP Address Issue in Microsoft Internet Explorer 4: http://technet.microsoft.com/security/bulletin/ms98-016
Untrusted Scripted Paste Issue in Microsoft Internet Explorer 4.01: http://technet.microsoft.com/security/bulletin/ms98-015
Internet Explorer Cross Frame Navigate: http://technet.microsoft.com/security/bulletin/ms98-013
Updates available for Security Vulnerabilities in Microsoft PPTP: http://technet.microsoft.com/security/bulletin/ms98-012
Window.External JScript Vulnerability in Microsoft Internet Explorer 4.0: http://technet.microsoft.com/security/bulletin/ms98-011
Long file name Security Issue affecting Microsoft Outlook 98 and Microsoft Outlook Express 4.x: http://technet.microsoft.com/security/bulletin/ms98-008

Reference(s):
http://www.microsoft.com/technet/security/default.mspx
http://www.microsoft.com/technet/security/currentdl.aspx

Paul Szabo psz@maths.usyd.edu.au 28 Oct 24