July 2013 - Microsoft Releases 7 Security Advisories

Microsoft addresses the following vulnerabilities in its July batch of patches:

• (MS13-052) Vulnerabilities in .NET Framework and Silverlight Could Allow Remote Code Execution (2861561)
  Risk Rating: Critical
  
  

  This security update addresses seven vulnerabilities in Microsotf .NET Framework and Silverlight. Successful exploitation may allow a remote attacker to execute a malware onto vulnerable systems. Read more here.

• (MS13-053) Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2850851)
  Risk Rating: Critical
  
  

  This update resolves two publicly revealed and six privately reported vulnerabilities in Windows, which may allow a remote attacker to execute malware onto outdated systems. To do so, a user must view a maliciously-crafted shared content embedded with TrueType font files. Read more here.

• (MS13-054) Vulnerability in GDI Could Allow Remote Code Execution (2848295)
  Risk Rating: Critical
  
  

  This security update addresses a vulnerability in Microsoft Windows, Office, Lync and Visual Studio, which may lead to malware infection of vulnerable systems. Read more here.

• (MS13-055) Cumulative Security Update for Internet Explorer (2846071)
  Risk Rating: Critical
  
  

  This security update addresses seventeen undisclosed vulnerabilities in Internet Explorer, the most severe of which may lead to malware infection. To do so, a users may need to view maliciously-crafted webpage using Internet Explorer browser. Once done, the malicious user may gain same user rights as the current user. Read more here.

• (MS13-056) Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2845187)
  Risk Rating: Critical
  
  

  This security update addresses a privately reported vulnerability in Windows, which could allow malware execution one user opens a malicious image file. Read more here.

• (MS13-057) Vulnerability in Windows Media Format Runtime Could Allow Remote Code Execution (2847883)
  Risk Rating: Critical
  
  

  This security update addresses an undisclosed vulnerability in Windows, which could lead to malware execution once a user opens specific media file. Read more here.

• (MS13-058) Vulnerability in Windows Defender Could Allow Elevation of Privilege (2847927)
  Risk Rating: Important
  
  

  This security update addresses a privately reported vulnerability in Windows Defender for Windows 7 and Windows Server 2008 R2. It may allow a malicious user to gain elevated privileges, however, the attacker must have valid logon credentials to exploit this flaw. Read more here.