Alert (TA10-068A)

Systems Affected

• Microsoft Windows
• Microsoft Office

Overview

Microsoft has released updates to address vulnerabilities in Microsoft Windows and Microsoft Office.

Description

Microsoft has released security bulletins for multiple vulnerabilities in Microsoft Movie Maker, Microsoft Office Producer 2003, and Microsoft Office Excel. These bulletins are described in the Microsoft Security Bulletin Summary for March 2010. Microsoft notes that affected versions of Microsoft Movie Maker were either included with Microsoft Windows or available as an optional download.

Impact

A remote, unauthenticated attacker could execute arbitrary code or cause a vulnerable application to crash.

Solution

Apply updates from Microsoft

Microsoft has provided updates for these vulnerabilities in the Microsoft Security Bulletin Summary for March 2010. The security bulletin describes any known issues related to the updates. Administrators are encouraged to note these issues and test for any potentially adverse effects. Administrators should consider using an automated update distribution system such as Windows Server Update Services (WSUS).

Microsoft notes that there is no security update available for Microsoft Producer 2003 at this time of this writing. Users can mitigate the impact to systems with Microsoft Producer 2003 by applying the automated solution to remove the Microsoft Producer file associations using the Fix it found in Microsoft Knowledge Base Article 975561, and by applying the workarounds in Microsoft Security Bulletin MS10-016.

References

• Microsoft Security Bulletin Summary for March 2010 - http://www.microsoft.com/technet/security/bulletin/MS10-mar.mspx
• Microsoft Windows Server Update Services - http://technet.microsoft.com/en-us/wsus/default.aspx
• Microsoft Knowledge Base Article 975561 - http://support.microsoft.com/kb/975561
• Microsoft Security Bulletin MS10-016 - http://www.microsoft.com/technet/security/bulletin/ms10-016.mspx

Revision History

• March 09, 2010: Initial release

Was this document helpful?  Yes  |   Somewhat  |   No