US Computer Emergency Readiness Team banner graphic National Cyber Awareness System: TA13-134A: Microsoft Updates for Multiple Vulnerabilities [ https://www.us-cert.gov/ncas/alerts/TA13-134A ] 05/14/2013 04:08 PM EDT Original release date: May 14, 2013 Systems Affected * Microsoft Windows * Internet Explorer * Microsoft .NET Framework * Microsoft Lync * Microsoft Office * Microsoft Windows Essentials Overview Select Microsoft software products contain multiple vulnerabilities. Microsoft has released updates to address these vulnerabilities. Description The Microsoft Security Bulletin Summary for May 2013 [ http://technet.microsoft.com/en-us/security/bulletin/ms13-may ]describes multiple vulnerabilities in Microsoft software. Microsoft has released updates to address these vulnerabilities. Impact A remote, unauthenticated attacker could execute arbitrary code, cause a denial of service, or gain unauthorized access to your files or system. Solution *Apply Updates* Microsoft has provided updates for these vulnerabilities in the Microsoft Security Bulletin Summary for May 2013 [ http://technet.microsoft.com/en-us/security/bulletin/ms13-may ], which describes any known issues related to the updates. Administrators are encouraged to note these issues and test for any potentially adverse effects. In addition, administrators should consider using an automated update distribution system such as Windows Server Update Services [ http://technet.microsoft.com/en-us/wsus/default.aspx ] (WSUS). Home users are encouraged to enable automatic updates [ http://windows.microsoft.com/en-us/windows-vista/Turn-automatic-updating-on-or-off ]. References * Microsoft Security Bulletin Summary for May 2013 [ http://technet.microsoft.com/en-us/security/bulletin/ms13-may ] * Windows Server Update Services [ http://technet.microsoft.com/en-us/windowsserver/bb332157.aspx ] * Turn automatic updating on or off [ http://windows.microsoft.com/en-us/windows-vista/Turn-automatic-updating-on-or-off ] Revision History * Initial Release 5/14/2013 ________________________________________________________________________ This product is provided subject to this Notification [ http://www.us-cert.gov/privacy/notification ] and this Privacy & Use [ http://www.us-cert.gov/privacy/ ] policy. ________________________________________________________________________ OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ http://www.us-cert.gov/related-resources ] STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ] SUBSCRIBER SERVICES: Manage Preferences [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscribers/new?preferences=true ]|Unsubscribe [ https://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/one_click_unsubscribe?verification=5.a57a8ba61dff70445337816fa56f272d&destination=packet@packetstormsecurity.org ]|Help <support@govdelivery.com> ________________________________________________________________________ This email was sent to packet@packetstormsecurity.org using GovDelivery, on behalf of: United States Computer Emergency Readiness Team (US-CERT) ? 245 Murray Lane SW Bldg 410 ? Washington, DC 20598 ? (703) 235-5110 Powered by GovDelivery [ http://www.govdelivery.com/portals/powered-by ]