September 2011 - Microsoft Releases 5 Security Advisories

Microsoft addresses the following vulnerabilities in its September batch of patches:

• (MS11-070) Vulnerability in WINS Could Allow Elevation of Privilege (2571621)
  Risk Rating: Important
  
  This security update addresses an undisclosed vulnerability in the Windows Internet Name service (WINS), which may allow elevation of privilege. This may happen once user receives a specially made WINS packet on an affected system with WINS service. However, an attacker needs a valid logon credentials before exploiting this software bug locally. Read more here.



• (MS11-071) Vulnerability in Windows Components Could Allow Remote Code Execution (2570947)
  Risk Rating: Important
  
  This security update fixes a disclosed vulnerability in Windows, which could allow arbitrary code execution if users open a legitimate .RTF, .TXT, or .DOC file located in the same network as a malicious .DLL file. Successfully exploiting this vulnerability may give an attacker the same user rights as the local user. Read more here.



• (MS11-072) Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2587505)
  Risk Rating: Important
  
  This security update addresses five vulnerabilities in Microsoft Office that may allow an attacker to execute arbitrary code if unwitting users open a maliciously crafted Microsoft Excel file. Exploiting these bugs could give an attacker the same user rights as the logged-on user. Read more here.



• (MS11-073) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2587634)
  Risk Rating: Important
  
  This security update addresses two reported vulnerabilities in Microsoft Office that may allow arbitrary code execution once users open a malicious Office file or if users open a legitimate Officefile located in the same network as the malicious file. Read more here.



• (MS11-074) Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2451858)
  Risk Rating: Important
  
  This security update addresses five privately reported vulnerabilities and one publicly reported vulnerability Microsoft SharePoint and Windows SharePoint Services. The most severe of these vulnerabilities could lead to an elevation of privilege if a user clicks or visits a malicious website. However, users using Internet Explorer 8 and 9 are at a reduced risk, since the XSS filter in these versions help block the attack. Read more here.