Proactive IT Security
 

Three critical updates for Microsoft systems in December 2009

2009-12-09 [Software advisories]

09 December 2009

In its security bulletin summary for December 2009 Microsoft has published three updates for critical vulnerabilities in its operating systems / applications as well as three important updates.

Critical is Microsoft's highest vulnerability rating.

A summary describing briefly the vulnerabilities is available from Microsoft's Security Bulletin Summary for December 2009.
From this page you will also find links to more detailed information in Microsoft's Security Bulletins MS09-069 - MS09-074.

The critical update addresses the following issues:

  • Two privately reported vulnerabilities in Internet Authentication Service.
  • One privately reported vulnerability in Microsoft Office Project.
  • One publicly disclosed and four privately reported vulnerabilities in Internet Explorer.

Updates that fixes the vulnerabilities are available from Windows automatic update mechanism for systems that support this. Alternatively, one may download updates from http://windowsupdate.microsoft.com.

Norman advices all affected users to download the security updates as soon as possible, to be protected from potential exploits.