March 2013 - Microsoft Releases 7 Security Advisories

Microsoft addresses the following vulnerabilities in its March batch of patches:

• (MS13-021) Cumulative Security Update for Internet Explorer (2809289)
  Risk Rating: Critical
  
  

  This patch addresses several vulnerabilities found in Internet Explorer. The said vulnerabilities when exploited could allow remote code execution via a specially crafted webpage thus compromising the security of the affected systems. Read more here.

• (MS13-022) Vulnerability in Silverlight Could Allow Remote Code Execution (2814124)
  Risk Rating: Critical
  
  

  This patch addresses a vulnerability found in Microsoft Silverlight. It can allow remote code execution when exploited via a specially crafted Silverlight application hosted on websites. Read more here.

• (MS13-023) Vulnerability in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution (2801261)
  Risk Rating: Critical
  
  

  This patch addresses a vulnerability found in Microsoft Office. It can be exploited once a user opens a specially crafted Visio file thus resulting to remote code execution, compromising the security of the systems. Read more here.

• (MS13-024) Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2780176)
  Risk Rating: Critical
  
  

  This patch addresses vulnerabilities found in Microsoft SharePoint and Microsoft SharePoint Foundation. When exploited via a malicious URL pointing to a SharePoint site, it can allow elevation of privilege. Read more here.

• (MS13-025) Vulnerability in Microsoft OneNote Could Allow Information Disclosure (2816264)
  Risk Rating: Important
  
  

  This patch addresses a vulnerability existing in Microsoft OneNote. A remote attacker can abused this vulnerability when they lure users into opening a specially crafted OneNote file thus leading to information disclosure. Read more here.

• (MS13-026) Vulnerability in Office Outlook for Mac Could Allow Information Disclosure (2813682)
  Risk Rating: Important
  
  

  This patch addresses a vulnerability existing Microsoft Office for Mac. When exploited via a specially crafted email message it can allow information disclosure. Read more here.

• (MS13-027) Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation Of Privilege (2807986)
  Risk Rating: Important
  
  

  This patch addresses the vulnerabilities found in Microsoft Windows. These vulnerabilities when exploited can allow elevation of privilege once attacker gains access to an affected system thus compromising its security. Read more here.