Microsoft security bulletin for February 11 2014

Microsoft security bulletin for February 11 2014
Note: There may be latency issues due to replication, if the page does not display keep refreshing

Today Microsoft released the following Security Bulletin(s).


Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.

Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.

Bulletin Summary:

http://technet.microsoft.com/en-us/security/bulletin/ms14-feb

Critical (4)

Microsoft Security Bulletin MS14-010
Cumulative Security Update for Internet Explorer (2909921)
http://technet.microsoft.com/en-us/security/bulletin/ms14-010

Microsoft Security Bulletin MS14-011
Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (2928390)
http://technet.microsoft.com/en-us/security/bulletin/ms14-011

Microsoft Security Bulletin MS14-007
Vulnerability in Direct2D Could Allow Remote Code Execution (2912390)
http://technet.microsoft.com/en-us/security/bulletin/ms14-007

Microsoft Security Bulletin MS14-008
Vulnerability in Microsoft Forefront Protection for Exchange Could Allow Remote Code Execution (2927022)
http://technet.microsoft.com/en-us/security/bulletin/ms14-008




Important (3)

Microsoft Security Bulletin MS14-009
Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2916607)
http://technet.microsoft.com/en-us/security/bulletin/ms14-009

Microsoft Security Bulletin MS14-005
Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure (2916036)
http://technet.microsoft.com/en-us/security/bulletin/ms14-005

Microsoft Security Bulletin MS14-006
Vulnerability in IPv6 Could Allow Denial of Service (2904659)
http://technet.microsoft.com/en-us/security/bulletin/ms14-006

Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.

If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact For home users, no-charge support for security updates (only!) is available by calling 800-MICROSOFT (800-642-7676) in the US or 877-568-2495 in Canada.

As always, download the updates only from the vendors website - visit Windows Update and Office Update or Microsoft Update websites. You may also get the updates thru Automatic Updates functionality in Windows system.

Security Tool
Find out if you are missing important Microsoft product updates by using MBSA.

 

Microsoft Webcast: Information about the February 2014 Security Bulletin Release


Event ID:

1032572879

Starts: Wednesday, February 12, 2014 11:00 AM
Time zone: (GMT-08:00) Pacific Time (US & Canada)
Duration: 1 hour(s)


Language(s):

English.


Product(s):

computer security and information security.


Audience(s):

IT Decision Maker and IT Manager.


Join us for a brief overview of the technical details of this month's Microsoft security bulletins. We intend to address your concerns in this webcast. Therefore, Microsoft security experts devote most of this webcast to answering the questions that you ask.


Presented by:

Dustin Childs, Group Manager, Response Communications, Microsoft Corporation

and


TBD


Register now for the February Security Bulletin webcast.

 

February 2014 Security Release ISO Image


Download
This DVD5 ISO image file contains the security updates for Windows released on Windows Update on February 11, 2014.

http://www.microsoft.com/en-us/download/details.aspx?id=41929

 

Microsoft Security Bulletin Minor Revisions Issued: February 12, 2014


Summary

The following bulletins have undergone minor revision increments.
Please see the bulletins for more details.

* MS14-feb


Bulletin Information:

* MS14-feb

https://technet.microsoft.com/security/bulletin/MS14-feb
- Reason for Revision: V1.1 (February 12, 2014): For MS14-008,
revised the Exploitability Assessment for Older Software Release
in the Exploitability Index for CVE-2014-0294.
- Originally posted: February 11, 2014
- Updated: February 12, 2014
- Version: 1.1

 

Microsoft Security Advisory (293408

Vulnerability in Internet Explorer Could Allow Remote Code Execution

Published: Wednesday, February 19, 2014


Revisions
V1.0 (February 19, 2014): Advisory published.
https://technet.microsoft.com/en-us/security/advisory/2934088