Microsoft Updates

Overview of the December 2008 Microsoft patches and their status. 8 crtical and important updates have been covered.

MS08-070 Multiple vulnerabilities in activeX controls from visual basic 6.0’s runtime allow random code execution. Also affects Visual studio, Foxpro, Frontpage, and MS Project. The vulnerable files are distributed with 3rd party applications as well.

MS08-071 Multiple overflow vulnerabilities allow code execution with the rights of the logged on user via crafted WMF files. Replaces MS08-021.

MS08-072 A multitude of vulnerabilities allow random code execution in office (and via extension Outlook). Also affects the mac versions of office (Office 2004 and Office 2008).

MS08-073 Multiple vulnerabilities allow random code execution with the rights of the logged on user.

MS08-074 Multiple vulnerabilities allo allow random code execution in office. Also affects the mac versions of office (Office 2004 and Office 2008). Replaces MS08-058.

MS08-075 Multiple vulnerabilities allow random code execution with the rights of the logged on user.

MS08-076 Multiple vulnerabilities allow random code execution with the rights of the logged-on user.

MS08-077 Bypassing authentication is possible on sharepoint servers.