February 2014 - Microsoft Releases 7 Security Advisories

Microsoft addresses the following vulnerabilities in its February batch of patches:

• (MS14-005) Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure (2916036)
  Risk Rating: Important
  

  This security update resolves a publicly disclosed vulnerability in Microsoft XML Core Services included in Microsoft Windows. The vulnerability could allow information disclosure if a user views a specially crafted webpage using Internet Explorer.



• (MS14-006) Vulnerability in IPv6 Could Allow Denial of Service (2904659)
  Risk Rating: Important
  

  This security update resolves a publicly disclosed vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a large number of specially crafted IPv6 packets to an affected system.

• (MS14-007) Vulnerability in Direct2D Could Allow Remote Code Execution (2912390)
  Risk Rating: Critical
  

  This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.



• (MS14-008) Vulnerability in Microsoft Forefront Protection for Exchange Could Allow Remote Code Execution (2927022)
  Risk Rating: Critical
  

  This security update resolves a privately reported vulnerability in Microsoft Forefront. The vulnerability could allow remote code execution if a specially crafted email message is scanned.



• (MS14-009) Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2916607)
  Risk Rating: Important
  

  This security update resolves two publicly disclosed vulnerabilities and one privately reported vulnerability in Microsoft .NET Framework. The most severe vulnerability could allow elevation of privilege if a user visits a specially crafted website or a website containing specially crafted web content.



• (MS14-010) Cumulative Security Update for Internet Explorer (2909921)
  Risk Rating: Critical
  

  This security update resolves one publicly disclosed vulnerability and twenty-three privately reported vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.



• (MS14-011) Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (2928390)
  Risk Rating: Critical
  

  This security update resolves a privately reported vulnerability in the VBScript scripting engine in Microsoft Windows. The vulnerability could allow remote code execution if a user visited a specially crafted website.