November 2013 - Microsoft Releases 8 Security Advisories

Microsoft addresses the following vulnerabilities in its October batch of patches:

• (MS13-088) Cumulative Security Update for Internet Explorer (2888505)
  Risk Rating: Critical
  
  

  This security update resolves ten reported vulnerabilities in Internet Explorer. A successful exploit may permit an attacker to execute a malware once user views a malicious webpage via Internet Explorer. Read more here.

• (MS13-089) Vulnerability in Windows Graphics Device Interface Could Allow Remote Code Execution (2876331)
  Risk Rating: Critical
  
  

  This security update addresses a vulnerability in Microsoft Windows, which can lead to remote execution of malware once users open a specially crafted Windows Write file in WordPad. Read more here.

• (MS13-090) Cumulative Security Update of ActiveX Kill Bits (2900986)
  Risk Rating: Critical
  
  

  This security update resolves a reported vulnerability which may lead to remote malware execution if user visits a maliciously-crafted website. Read more here.

• (MS13-091) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2885093)
  Risk Rating: Important
  
  

  This security update resolves three reported vulnerabilities in Microsoft Office, which may allow remote execution of malware if a user opens a maliciously-crafted WordPerfect file in an affected version of Microsoft Office. Read more here.

• (MS13-092) Vulnerability in Hyper-V Could Allow Elevation of Privilege (2893986)
  Risk Rating: Important
  
  

  This security update resolves a vulnerability in Microsoft Windows. It may lead to denial of service if the attacker passes a speciall-crafted function parameter in a hypercall from an existing running virtual machine to the hypervisor. Read more here.

• (MS13-093) Vulnerability in Windows Ancillary Function Driver Could Allow Information Disclosure (2875783)
  Risk Rating: Important
  
  

  This security update resolves a vulnerability in Microsoft Windows, which may allow information theft if an an attacker logs on to an affected system as a local user and runs a malware crafted to steal information. The attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability. Read more here.

• (MS13-094) Vulnerability in Microsoft Outlook Could Allow Information Disclosure (2894514)
  Risk Rating: Important
  
  

  This security update resolves a vulnerability in Microsoft Outlook. It may result in information theft if a user opens or previews a malicious email using an affected version of Outlook. Read more here.

• (MS13-095) Vulnerability in Digital Signatures Could Allow Denial of Service (2868626)
  Risk Rating: Important
  
  

  This security update resolves a vulnerability in Microsoft Windows that could result in denial of service when an affected web service processes a malicious certificate. Read more here.