> MAPP

Microsoft Active Protections Page (MAPP)
The Microsoft Active Protections Program (MAPP) is a new program for security software providers. Members of MAPP receive security vulnerability information from the Microsoft Security Response Center (MSRC) in advance of Microsoft’s monthly security update.

By receiving the latest vulnerability and security related issues in advance, INCA Internet is better able to provide the fasted protection to our customers.

Below you can find the bulletins released by MAPP and MS Technet.

MS09-063: Vulnerability in Web Services on Devices API Could Allow Remote Code Execution (973565) Hit 230

Microsoft Bulletin

CVE

Rating

MS09-063: Vulnerability in Web Services on Devices API Could Allow Remote Code Execution (973565)

CVE-2009-2512

Critical

Description

This security update resolves a privately reported vulnerability in the Web Services on Devices Application Programming Interface (WSDAPI) on the Windows operating system. The vulnerability could allow remote code execution if an affected Windows system receives a specially crafted packet. Only attackers on the local subnet would be able to exploit this vulnerability.

 

This security update is rated Critical for all supported editions of Windows Vista and Windows Server 2008.

 

The security update addresses the vulnerability by correcting the processing of headers in WSD messages.

 

Recommendation. The majority of customers have automatic updating enabled and will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

 

For administrators and enterprise installations, or end users who want to install this security update manually, Microsoft recommends that customers apply the update immediately using update management software, or by checking for updates using the Microsoft Update service.



Up
List
Down
 
Company Info  l  Support  l  Contact Us  l  Terms of Service    
Copyright (C) INCA Internet Co., Ltd. All rights reserved.