October 2013 - Microsoft Releases 8 Security Advisories

Microsoft addresses the following vulnerabilities in its October batch of patches:

• (MS13-080) Cumulative Security Update for Internet Explorer (2879017)
  Risk Rating: Critical
  
  

  This security update addresses a publicly disclosed vulnerability and undisclosed nine vulnerabilities in Internet Explorer. A successful exploit may permit an attacker to execute a malware once user views a malicious webpage via Internet Explorer. Read more here.

• (MS13-081) Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2870008)
  Risk Rating: Critical
  
  

  This security update addresses seven vulnerabilities in Microsoft Windows, which can lead to remote execution of malware once users open a shared content that embeds TrueType or OpenType files. Read more here.

• (MS13-082) Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2878890)
  Risk Rating: Critical
  
  

  This security update addresses three reported vulnerabiilties in Microsoft .NET framework, which may lead to remote malware execution if user visits website with a malicious OpenType font (OTP) file. Read more here.

• (MS13-083) Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2864058)
  Risk Rating: Critical
  
  

  This security update addresses a vulnerability in Microsoft Windows, which may allow remote execution of malware once attacker sends a malicious web request to ASP.NET web application.Read more here.

• (MS13-084) Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2885089)
  Risk Rating: Important
  
  

  This security update addresses two vulnerabilities in MS Office that may lead to malware execution once user opens a malicious Office file in a vulnerable MS SharePint Server, MS Ofice Services, or Web Apps. Read more here.

• (MS13-085) Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080)
  Risk Rating: Important
  
  

  This security update addresses two vulnerabilities in Microsoft Office, which may allow remote code execution once users open a malicious Office file with a specific versions of MS Excel or MS Office software. Read more here.

• (MS13-086) Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2885084)
  Risk Rating: Important
  
  

  This security update addresses two vulnerabilities in MS Office that may allow malware execution once a malicious file is open using affected versions of MS Word or MS Office. Read more here.

• (MS13-087) Vulnerability in Silverlight Could Allow Information Disclosure (2890788)
  Risk Rating: Important
  
  

  This security update addresses a vulnerability in Silverlight, that may allow unwanted data disclosure if an attacker convinces a user to view a website hosting a malicious Silverlight application. Read more here.