ITSS-Advisory : MEDIUM : Microsoft : Various Products : Scheduled Updates - Aug 2009

THREAT LEVEL
============
Medium.

INFORMATION
===========
On 11 Aug 2009, Microsoft released 9 bulletins in its scheduled update
publication for August 2009. They are summarised as follows:

Affected: Remote Desktop Connection
Impact: Remote Code Execution
Rating: Critical
Known Issues: http://support.microsoft.com/kb/970927
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-044.mspx

Affected: Microsoft Office Web Components
Impact: Remote Code Execution
Rating: Critical
Known Issues: http://support.microsoft.com/kb/957638
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-043.mspx

Affected: Microsoft Telnet Service
Impact: Remote Code Execution
Rating: Important
Known Issues: None
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-042.mspx

Affected: Microsoft Workstation Service
Impact: Elevation of Privilege
Rating: Important
Known Issues: None
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-041.mspx

Affected: Microsoft Message Queuing Service
Impact: Elevation of Privilege
Rating: Important
Known Issues: None
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-040.mspx

Affected: Microsoft Windows Internet Name Service (WINS)
Impact: Remote Code Execution
Rating: Critical
Known Issues: None
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-039.mspx

Affected: Microsoft Windows Media File Processing
Impact: Remote Code Execution
Rating: Critical
Known Issues: None
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-038.mspx

Affected: Microsoft Active Template Library
Impact: Remote Code Execution
Rating: Critical
Known Issues: None
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-037.mspx

Affected: Microsoft ASP.NET
Impact: Denial of Service
Rating: Important
Known Issues: None
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-036.mspx

ACTION
======
Administrators of affected computers are advised to review the bulletins,
test and apply relevant updates.

Computers in the testbed will have the patches applied immediately, and their
performance will be monitored. The effects of the patch on these computers will
be sent to its-announce@unimelb.edu.au by early afternoon on Fri 14 Aug 2009.