September 2011 Microsoft Patch Tuesday Summary

[#1]

Welcome to another addition of patch Tuesday summary blog.  Last month’s patch Tuesday involved patching 22 vulnerabilities over 13 bulletins, while this month we are patching 15 new vulnerabilities over 5 bulletins.

Here is a list of the vulnerabilities fixed in today’s patches:

MS11-070 - Vulnerability in WINS Could Allow Elevation of Privilege

• CVE-2011-1984 - Microsoft WINS Privilege Escalation Vulnerability

MS11-071 - Vulnerability in Display Panning Extension Could Allow Remote Code Execution

• CVE-2011-1991 - Microsoft Display Panning Extension Remote Code Execution Vulnerability

MS11-072 - Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution

• CVE-2011-1986 - Microsoft Excel Remote Code Execution Vulnerability
• CVE-2011-1987 - Microsoft Excel Remote Code Execution Vulnerability
• CVE-2011-1988 - Microsoft Excel Remote Code Execution Vulnerability
• CVE-2011-1989 - Microsoft Excel Remote Code Execution Vulnerability
• CVE-2011-1990 - Microsoft Excel Remote Code Execution Vulnerability

MS11-073 - Vulnerability in Microsoft Office Could Allow Remote Code Execution

• CVE-2011-1980 - Microsoft Office Remote Code Execution Vulnerability
• CVE-2011-1982 - Microsoft Office Remote Code Execution Vulnerability

MS11-074 - Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege

• CVE-2011-0653 - Microsoft SharePoint Privilege Escalation Vulnerability
• CVE-2011-1890 - Microsoft SharePoint Privilege Escalation Vulnerability
• CVE-2011-1891 - Microsoft SharePoint Privilege Escalation Vulnerability
• CVE-2011-1892 - Microsoft SharePoint Privilege Escalation Vulnerability
• CVE-2011-1893 - Microsoft SharePoint Privilege Escalation Vulnerability
• CVE-2011-1252 - Microsoft SharePoint Privilege Escalation Vulnerability

As shown in the chart above, we had been seeing a small number of vulnerabilities patched followed by a large number of vulnerabilities patched in an alternating pattern however, for the past 4 months we have seen approximately the same number of vulnerabilities patched.  Remember to always be cautious when opening documents and email attachments especially when the origin of the documents is unknown.  As we do every month, we’ve released a signature update to address the vulnerabilities fixed in today’s patches.  Happy patching!

For additional information on how you can protect your network from emerging threats, please visit http://www.juniper.net/us/en/products-services/security/srx-series/