FYI…
- https://technet.microsoft.com/en-us/security/bulletin/ms13-dec
Dec 10, 2013 - "This bulletin summary lists security bulletins released for December 2013…
(Total of -11-)
Microsoft Security Bulletin MS13-096 - Critical
Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (2908005)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-096
Critical - Remote Code Execution - May require restart - Microsoft Windows, Microsoft Office, Microsoft Lync
• V1.1 (December 10, 2013): Clarified that users should -undo- the Disable the TIFF Codec workaround* and the Disable data collaboration in Lync workaround after applying the update. See the Update FAQ for more information. Added undo steps to the Disable data collaboration in Lync workaround…
* https://support.microsoft.com/kb/2908005
Disable this Fix it - 51005
• V1.2 (December 20, 2013): Revised the Based on the configuration of my system, how do I know if my system is affected? Update FAQ to include the updates that are applicable for each configuration…
Microsoft Security Bulletin MS13-097 - Critical
Cumulative Security Update for Internet Explorer (2898785)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-097
Critical - Remote Code Execution - Requires restart - Microsoft Windows, Internet Explorer
Microsoft Security Bulletin MS13-098 - Critical
Vulnerability in Windows Could Allow Remote Code Execution (2893294)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-098
Critical - Remote Code Execution - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS13-099 - Critical
Vulnerability in Microsoft Scripting Runtime Object Library Could Allow Remote Code Execution (2909158)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-099
Critical - Remote Code Execution - May require restart - Microsoft Windows
Microsoft Security Bulletin MS13-105 - Critical
Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2915705)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-105
Critical - Remote Code Execution - Does not require restart - Microsoft Exchange
• V1.1 (December 10, 2013): Updated the Known Issues entry in the Knowledge Base Article section from "None" to "Yes".
Microsoft Security Bulletin MS13-100 - Important
Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2904244)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-100
Important - Remote Code Execution - May require restart - Microsoft SharePoint
Microsoft Security Bulletin MS13-101 - Important
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2880430)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-101
Important - Elevation of Privilege - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS13-102 - Important
Vulnerability in LRPC Client Could Allow Elevation of Privilege (2898715)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-102
Important - Elevation of Privilege - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS13-103 - Important
Vulnerability in ASP.NET SignalR Could Allow Elevation of Privilege (2905244)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-103
Important - Elevation of Privilege - Does not require restart - Microsoft Developer Tools
Microsoft Security Bulletin MS13-104 - Important
Vulnerability in Microsoft Office Could Allow Information Disclosure (2909976)
- https://technet.microsoft.com/en-us/security/bulletin/ms13-104
Important - Information Disclosure - May require restart - Microsoft Office
Microsoft Security Bulletin MS13-106 - Important
Vulnerability in a Microsoft Office Shared Component Could Allow Security Feature Bypass
- https://technet.microsoft.com/en-us/security/bulletin/ms13-106
Important - Security Feature Bypass - May require restart - Microsoft Office
___
- http://blogs.technet.com/b/msrc/archive/2013/12/10/omphaloskepsis-and-the-december-2013-security-update-release.aspx?Redirected=true
Deployment Priority
- https://blogs.technet.com/cfs-filesystemfile.ashx/__key/communityserver-components-imagefileviewer/communityserver-blogs-components-weblogfiles-00-00-00-45-71/7360.deployment.jpg_2D00_550x0.jpg
- http://blogs.technet.com/b/srd/archive/2013/12/10/assessing-risk-for-the-december-2013-security-updates.aspx
"… we released eleven security bulletins addressing 24 CVE’s…"
___
December 2013 Office Update Release
- http://blogs.technet.com/b/office_sustained_engineering/archive/2013/12/09/december-2013-office-update-release.aspx
9 Dec 2013 - "… There are 12 security updates (4 bulletins) and 43 non-security updates…"
(More detail at the URL above.)
___
- https://secunia.com/advisories/55584/ - MS13-096
- https://secunia.com/advisories/55967/ - MS13-097
- https://secunia.com/advisories/55971/ - MS13-098
- https://secunia.com/advisories/55981/ - MS13-099
- https://secunia.com/advisories/55985/ - MS13-100
- https://secunia.com/advisories/55986/ - MS13-101
- https://secunia.com/advisories/55988/ - MS13-102
- https://secunia.com/advisories/55991/ - MS13-103
- https://secunia.com/advisories/56007/ - MS13-103
- https://secunia.com/advisories/55997/ - MS13-104
- https://secunia.com/advisories/55998/ - MS13-105
- https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-5057 - MS13-106
___
ISC Analysis
- https://isc.sans.edu/diary.html?storyid=17198
Last Updated: 2013-12-10 20:39:23 UTC
___
0-Day Fixes From Adobe, Microsoft
- http://krebsonsecurity.com/2013/12/zero-day-fixes-from-adobe-microsoft/
Dec 10, 2013
.
