[SingCERT] Microsoft Security Updates for December 2014

Published on Wednesday, 10 December 2014 14:53

[ Summary ]

Microsoft has released 7 security bulletins this month to address vulnerabilities in Microsoft Windows, Internet Explorer, Microsoft Office and Microsoft Exchange. 

3 of the bulletins are rated as Critical: MS14-080, MS14-081 and MS14-084.

The rest of the bulletins are rated as Important.


[ Affected System and Software ]

System

  • Windows Server 2003 Service Pack 2
  • Windows Server 2003 x64 Edition Service Pack 2
  • Windows Server 2003 SP2 for Itanium-based Systems
  • Windows Vista Service Pack 2
  • Windows Vista Service x64 Edition Pack 2
  • Windows Server 2008 Service Pack 2
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for Itanium-based Systems Service Pack 2
  • Windows 7 Service Pack 1
  • Windows 7 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
  • Windows 8
  • Windows 8 for x64-based Systems
  • Windows 8.1
  • Windows 8.1 for x64-based Systems
  • Windows Server 2012
  • Windows Server 2012 R2
  • Windows RT
  • Windows RT 8.1
  • Microsoft Exchange Server 2007 Service Pack 3
  • Microsoft Exchange Server 2010 Service Pack 3
  • Microsoft Exchange Server 2013

Software

  • Microsoft Office 2007 Service Pack 3
  • Microsoft Office 2010 Service Pack 2
  • Microsoft Office 2010 Service Pack 2 (64-bit)
  • Microsoft Office 2013
  • Microsoft Office 2013 Service Pack 1
  • Microsoft Office 2013 (64-bit)
  • Microsoft Office 2013 Service Pack 1 (64-bit)
  • Microsoft Office 2013 RT
  • Microsoft Office 2013 RT Service Pack 1
  • Microsoft Office for Mac 2011
  • Microsoft Word Viewer
  • Microsoft Office Compatibility Pack Service Pack 3
  • Microsoft SharePoint Server 2013
  • Microsoft SharePoint Server 2013 Service Pack 1
  • Microsoft Office Web Apps 2010 Service Pack 2
  • Microsoft Office Web Apps 2013
  • Microsoft Office Web Apps 2013 Service Pack 1
  • Internet Explorer 6
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • VBScript 5.6
  • VBScript 5.7
  • VBScript 5.8


[ Recommendations/Workaround ]

Home Users
Home users should use Windows Update to update Windows and Office to the latest version.

System Administrators
System administrators should review, test and update the affected systems and software to the latest version.


[ References ]

https://technet.microsoft.com/en-us/library/security/ms14-dec.aspx
https://technet.microsoft.com/library/security/MS14-075
https://technet.microsoft.com/library/security/ms14-080
https://technet.microsoft.com/library/security/ms14-081
https://technet.microsoft.com/library/security/ms14-082
https://technet.microsoft.com/library/security/ms14-083
https://technet.microsoft.com/library/security/ms14-084
https://technet.microsoft.com/library/security/ms14-085