Critical Vulnerabilities in Microsoft Windows and Components
Microsoft has released multiple security bulletins for critical vulnerabilities in Microsoft Windows and Windows Server, Internet Explorer, Office, .NET Framework, Silverlight, SQL Server, Developer Tools, and Forefront. These vulnerabilities may allow a remote, unauthenticated attacker to execute arbitrary code, gain elevated privileges, or cause a vulnerable application to crash.
For a complete description of the vulnerabilities and affected software, refer to Microsoft Security Bulletin Summary for October 2009.
AFFECTED SYSTEMS:
- Microsoft Windows and Windows Server
- Microsoft Internet Explorer
- Microsoft Office
- Microsoft .NET Framework
- Microsoft Silverlight
- Microsoft SQL Server
- Microsoft Developer Tools
- Microsoft Forefront
WHAT YOU NEED TO DO TO PROTECT YOUR SYSTEM:
1. Do NOT take action if you have a Computer Support Coordinator (CSC); they will apply the update for you or assist in instructing you.
2. If you do not have a CSC, please refer to Microsoft Security Bulletin Summary for October 2009 on how to obtain the latest updates for your specific software.
ADDITIONAL INFORMATION:
If you have questions about any of the information provided above, you may send email inquiries to security@ucsf.edu.
Teresa A. Regalia, GCIH
UCSF Enterprise Information Security
Telephone: 415-502-1567
Teresa.Regalia@ucsf.edu
OAAIS Customer Support Service Desk
7 a.m. - 6 p.m., Mon – Fri
(415) 514-4100, Option 2
customersupport@ucsf.edu
help.ucsf.edu
