U.S. Flag Official website of the Department of Homeland Security

Alert (TA09-195A)

Microsoft Updates for Multiple Vulnerabilities

Original release date: July 14, 2009 | Last revised: January 24, 2013

Systems Affected

  • Microsoft Windows and Windows Server
  • Microsoft DirectShow
  • Microsoft Virtual PC and Server
  • Microsoft Office Publisher
  • Microsoft Internet Security and Acceleration (ISA) Server

Overview

Microsoft has released updates that address vulnerabilities in Microsoft Windows, Windows Server, DirectShow, Virtual PC and Server, Office Publisher, and ISA Server.

Description

As part of the Microsoft Security Bulletin Summary for July 2009, Microsoft has released updates that address several vulnerabilities in Microsoft Windows, Windows Server, DirectShow, Windows Virtual PC and Server, Office Publisher, and ISA Server. Microsoft indicates that two of these vulnerabilities, CVE-2009-1537 and CVE-2008-0015, are being actively exploited.

Impact

A remote, unauthenticated attacker could execute arbitrary code, gain elevated privileges, or cause a vulnerable application to crash.

Solution

Microsoft has provided updates for these vulnerabilities in the Microsoft Security Bulletin Summary for July 2009. The security bulletin describes any known issues related to the updates. Administrators are encouraged to note these issues and test for any potentially adverse effects. Administrators should consider using an automated update distribution system such as Windows Server Update Services (WSUS).
 

References

Revisions

  • July 14, 2009: Initial release
  • August 27, 2009: Updated

This product is provided subject to this Notification and this Privacy & Use policy.

Was this document helpful?  Yes  |  Somewhat  |  No

Back to Top