| Bulletin | Exploit Types /Technologies Affected | System Types Affected | Exploit details public? / Being exploited? | Comprehensive, practical workaround available? | MS severity rating | Products Affected | Notes | Randy's recommendation |
MS09-024
957632 | Arbitrary code
/ Works Converters | Workstations Terminal Servers
| No/No | No | Critical | Office 2000 Office XP Office 2003 Office 2007 Office 2002
| | Patch after testing |
MS09-022
961501 | Arbitrary code
/ Print Spooler | Workstations Servers
| No/No | Yes | Critical | Win2000 XP Win2003 Vista Win2008
| | Disable Print Spooler if not used; Patch after testing |
MS09-023
963093 | Information disclosure
/ Windows Search 4.0 | Workstations Terminal Servers
| No/No | No | Moderate | XP Server 2003
| Restart Req'd | Patch after testing |
MS09-025
968537 | Privilege elevation
/ Windows | Workstations Terminal Servers
| Yes/No | No | Important | Win2000 XP Win2003 Vista Win2008
| Restart Req'd | Patch after testing |
MS09-021
969462 | Arbitrary code
/ Office Excel | Workstations Terminal Servers
| No/No | No | Critical | Office 2000 Office 2003 Office 2007 Office 2004 for Mac Office 2008 for Mac Open XML Format Converter Mac Excel Viewer Office Converter Pack Office 2002
| | |
MS09-027
969514 | Arbitrary code
/ Office Word | Workstations Terminal Servers
| No/No | Yes | Critical | Office 2000 Office 2003 Office 2007 Office 2004 for Mac Office 2008 for Mac Office Converter Pack Office 2002
| | Patch after testing |
MS09-019
969897 | Arbitrary code
/ Internet Explorer | Workstations Terminal Servers
| Yes/No | No | Critical | Internet Explorer
| Restart Req'd | Patch after minimal testing |
MS09-026
970238 | Privilege elevation
/ RPC | Workstations Servers
| Yes/No | No | Important | Win2000 XP Win2003 Vista Win2008
| RPC runtime & RPC third party | Patch after testing |
MS09-020
970483 | Privilege elevation
/ IIS | IIS Servers
| Yes/No | No | Important | Win2000 XP Win2003
| Restart Req'd | Patch after testing |
MS09-018
971055 | Arbitrary code
/ Active Directory | Domain Controllers
| No/No | Yes | Critical | Win2000 XP Win2003
| Restart Req'd | Patch after testing |