-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA11-284A Microsoft Updates for Multiple Vulnerabilities Original release date: October 11, 2011 Last revised: -- Source: US-CERT Systems Affected * Microsoft Windows * Microsoft .NET Framework * Microsoft Silverlight * Internet Explorer * Microsoft Forefront Unified Access Gateway * Microsoft Host Integration Server Overview There are multiple vulnerabilities in Microsoft Windows, .NET Framework, Silverlight, Internet Explorer, Forefront Unified Access Gateway, and Host Integration Server. Microsoft has released updates to address these vulnerabilities. I. Description The Microsoft Security Bulletin Summary for October 2011 describes multiple vulnerabilities in Microsoft Windows, .NET Framework, Silverlight, Internet Explorer, Forefront Unified Access Gateway, and Host Integration Server. Microsoft has released updates to address the vulnerabilities. II. Impact A remote, unauthenticated attacker could execute arbitrary code, cause a denial of service, or gain unauthorized access to your files or system. III. Solution Apply updates Microsoft has provided updates for these vulnerabilities in the Microsoft Security Bulletin Summary for October 2011. That bulletin describes any known issues related to the updates. Administrators are encouraged to note these issues and test for any potentially adverse effects. In addition, administrators should consider using an automated update distribution system such as Windows Server Update Services (WSUS). IV. References * Microsoft Security Bulletin Summary for October 2011 - * Microsoft Windows Server Update Services - ____________________________________________________________________ The most recent version of this document can be found at: ____________________________________________________________________ Feedback can be directed to US-CERT Technical Staff. Please send email to with "TA11-284A Feedback VU#127203" in the subject. ____________________________________________________________________ For instructions on subscribing to or unsubscribing from this mailing list, visit . ____________________________________________________________________ Produced 2011 by US-CERT, a government organization. Terms of use: ____________________________________________________________________ Revision History October 11, 2011: Initial release -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQEVAwUBTpSMLT/GkGVXE7GMAQLHGAf/axezFyU84ZPyWjypVhJdXRVJTCk3EpOT eOXXa6834tI08wzEjTfTwPSyVfomWi7/D15o6mnW470TyoKQ+cX4isB4O6NKHoM+ jjW57SmYkp3I9qPZi0guzF6q7kYwmBqUWxuwZn0eJ77yi8U9NzRxywjjg1ZXgbvq DmuNj/aMqDbd/xcOgypRM4bS6cWJ+aW2D4HNj8v2ffKabHtw/Nq/brBxv/K7gPaE LRzrz43a+hxlupTO+QFwwyOsqWRuE0k+wBHT8EV4cJkeH4o22X3hBJ2GxRXeJmMF bsAmiu+cDuR1OKPPoQ4jaBmCo4ot/drT6k3BCN0mgBCDMz23AMhLPw== =j6Pv -----END PGP SIGNATURE-----