Microsoft posts April 2009 security updates

Nice and regular-like...

As part of Microsoft’s commitment to deliver security updates on a predictable and consistent monthly schedule, Microsoft released eight security bulletins today, which addressed 23 vulnerabilities in Windows, Microsoft Office, Internet Explorer and Microsoft Internet Security and Acceleration Server.

Microsoft’s April Bulletin Release

  • MS09-009 (Maximum severity of Critical): This update resolves a newly discovered, privately reported and a publicly disclosed vulnerability in Microsoft Excel. This update received a 1 – Consistent Exploit Code Likely rating from Microsoft’s Exploitability Index.
  • MS09-010 (Maximum severity of Critical): This update resolves two publicly disclosed vulnerabilities and two privately reported vulnerabilities in Microsoft WordPad and Microsoft Office Text Converters.  This update received a 1 – Consistent Exploit Code Likely rating from Microsoft’s Exploitability Index.
  • MS09-011 (Maximum severity of Critical): This update resolves a newly discovered and privately reported vulnerability in Microsoft DirectX. This update received a 2 – Inconsistent Exploit Code Likely rating from Microsoft’s Exploitability Index.
  • MS09-012 (Maximum severity of Important): This update resolves four publicly disclosed vulnerabilities in Microsoft Windows. This update received a 1 – Consistent Exploit Code Likely rating from Microsoft’s Exploitability Index.
  • MS09-013 (Maximum severity of Critical): This update resolves one publicly disclosed vulnerability and two privately reported vulnerabilities in Microsoft Windows HTTP Services (WinHTTP). This update received a 1 – Consistent Exploit Code Likely rating from Microsoft’s Exploitability Index.
  • MS09-014 (Maximum severity of Critical): This update resolves four privately reported vulnerabilities and two publicly disclosed vulnerabilities in Internet Explorer. This update received a 1 – Consistent Exploit Code Likely rating from Microsoft’s Exploitability Index.
  • MS09-015 (Maximum severity of Moderate): This update resolves one publicly disclosed vulnerability in the Windows SearchPath function. This update received a 2 – Inconsistent Exploit Code Likely rating from Microsoft’s Exploitability Index.
  • MS09-016 (Maximum severity of Important): This update resolves a privately reported vulnerability and a publicly disclosed vulnerability in Microsoft Internet Security and Acceleration (ISA) Server and Microsoft Forefront Threat Management Gateway (TMG), Medium Business Edition (MBE). This update received a 3 – Functioning Exploit Code Unlikely rating from Microsoft’s Exploitability Index.

Comprehensive bulletin information is also available at Microsoft’s Security Update Archive. Also, Microsoft recommends that all customers sign up for Microsoft Update and enable its Automatic Updates functionality. This will enable customers to receive all updates available this month and help make their systems more secure.

Discuss this Article 6

robertsjoe
on Apr 14, 2009
Windows, more holes security flaws and holes than a sieve.
anonymous
on Apr 15, 2009
BEGINTRANSMIT Agents K'Pang and Hlophetius, report in! We have a 517 in sector 8 of the Forbidden Zone! Yes, I'm serious, I mean complete graviton reversal of the polarity field! All matter as we know it may well implode upon itself in a process that is both simultaneously instant and infinite! Plus, I didn't get the curly fries I ordered with my lunch! Who is responsible? Tentacles will roll! ENDTRANSMIT
Waethorn
on Apr 15, 2009
"Windows, more holes security flaws and holes than a sieve." You mean like your argument. Truthfully, OS X has far more security holes.
stevejobs
on Apr 15, 2009
And let's not forget the reigning queen of dangerous gaping holes, Waethorn's mother.
gorath
on Apr 15, 2009
Seriously, Paul the comments on this post alone perfectly demonstrate why you should moderate them.
Waethorn
on Apr 15, 2009
"Paul the comments on this post alone perfectly demonstrate why you should moderate them." A good ol' fashioned user banning would suffice.

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• 120 Technical
Sessions
• Networking with Peers
• Expert Speakers


Come See Paul Thurrott & Mary Jo Foley in Person!

Register Now

Office 365 InfoCenter

Get the latest insight and info from Paul

Read Now!

What I Use