ITSS-Advisory : MEDIUM : Microsoft : Various products : Various Issues

THREAT LEVEL
============
Medium.

INFORMATION
===========
On 08 Sep 2009, Microsoft released 5 bulletins in its scheduled update
publication for September 2009. They are summarised as follows:

Affected: JScript Scripting Engine
Impact: Remote Code Execution
Rating: Critical
Known Issues: http://support.microsoft.com/kb/971961
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-045.mspx

Affected: DHTML Editing Comopnent ActiveX Control
Impact: Remote Code Execution
Rating: Critical
Known Issues: None
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-046.mspx

Affected: Windows Media Format
Impact: Remote Code Execution
Rating: Critical
Known Issues: http://support.microsoft.com/kb/973812
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-047.mspx

Affected: Windows TCP/IP
Impact: Remote Code Execution
Rating: Critical
Known Issues: http://support.microsoft.com/kb/967723
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-048.mspx

Affected: Wireless LAN Autoconfig Service
Impact: Remote Code Execution
Rating: Critical
Known Issues: None
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-049.mspx

ACTION
======
Administrators of affected computers are advised to review the bulletins,
examine the known issues (if any), test and apply relevant updates.

Computers in the testbed will have the patches applied immediately, and
their performance will be monitored. The effects of the patch on these
computers will be sent to its-announce@unimelb.edu.au by Fri 11 Sep 2009.