ITSS-Advisory : MEDIUM : Microsoft : Various Products : Various Issues

THREAT LEVEL
============
Medium.

INFORMATION
===========
Microsoft has published 10 bulletins in the scheduled release for June 2009.

A summary with links for more details of each bulletin can be found at:
http://www.microsoft.com/technet/security/current.aspx

BRIEF DESCRIPTIONS
==================

Affected: Microsoft Office Word
Impact: Remote code execution
Rating: Critical
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-027.mspx

Affected: RPC in various Windows operating systems
Impact: Elevation of privilege
Rating: Important
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-026.mspx

Affected: Kernel in various Windows operating systems
Impact: Elevation of privilege
Rating: Important
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-025.mspx

Affected: Microsoft Works Converters
Impact: Remote code execution
Rating: Critical
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-024.mspx

Affected: Windows Search
Impact: Information disclosure
Rating: Moderate
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-023.mspx

Affected: Windows Print Spooler
Impact: Remote code execution
Rating: Critical
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-022.mspx

Affected: Microsoft Office Excel
Impact: Remote code execution
Rating: Critical
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-021.mspx

Affected: Internet Information Services
Impact: Elevation of privilege
Rating: Important
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-020.mspx

Affected: Internet Explorer
Impact: Remote code execution
Rating: Critical
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-019.mspx

Affected: Active Directory
Impact: Remote code execution
Rating: Critical
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-018.mspx

Affected: Microsoft Office Powerpoint
Impact: Remote code execution
Rating: Critical
Link: http://www.microsoft.com/technet/security/Bulletin/MS09-017.mspx

ACTION
======
Administrators of affected computers are advised to review the bulletins,
test and apply relevant updates.

Computers in the testbed will have the patches applied immediately, and their
performance will be monitored. The effects of the updates on these computers will
be sent to its-announce@unimelb.edu.au by early afternoon on Fri 12 June 2009.