- Threat Encyclopedia
- Vulnerability
- December 2009 - Microsoft Releases 6 Security Advisories
Microsoft addressed the following vulnerabilities in its December batch of patches:
This security update resolves several vulnerabilities in Microsoft Windows. These vulnerabilities could allow remote code execution if messages received by the Internet Authentication Service server are copied incorrectly into memory when handling PEAP authentication attempts.
This security update resolves a vulnerability in Microsoft Office Project. The vulnerability could allow remote code execution if a user opens a specially crafted Project file.
This security update resolves several vulnerabilities in Internet Explorer. The vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer.
This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow a denial of service if a remote, authenticated attacker, sends a specially crafted ISAKMP message to the Local Security Authority Subsystem Service (LSASS) on an affected system.
This security update resolves several vulnerabilities in Microsoft Windows. The more severe of these vulnerabilities could allow remote code execution if an attacker sent a specially crafted HTTP request to an ADFS-enabled Web server.
This security update resolves a vulnerability in Microsoft WordPad and Microsoft Office text converters. The vulnerability could allow remote code execution if a specially crafted Word 97 file is opened in WordPad or Microsoft Office Word.