# MA-258.112010: MyCERT Alert - Microsoft Security Bulletin Summary for November 2010

**Date:** 11 Nov 2010  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-258.112010  
**Advisory ID:** MA-258.112010

---

**1.0 Introduction**
Microsoft has released 3 security bulletins for November 2010. One of them is rated Critical while others are rated Important.
**2.0 The list of the critical vulnerability is as below:**
> *2.1 MS10-087 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution*
>
> This security update resolves one publicly disclosed vulnerability and four privately reported vulnerabilities in Microsoft Office. The most severe vulnerability could allow remote code execution if a user opens or previews a specially crafted RTF e-mail message. An attacker who successfully exploited any of these vulnerabilities could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
>
> Info: <http://go.microsoft.com/fwlink/?LinkId=203241>
**3.0 The list of the Important vulnerability is as below:**
> *2.2 MS10-088 Vulnerabilities in Microsoft Powerpoint Could Allow Remote Code Execution*
>
> This security update resolves two privately reported vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted PowerPoint file. An attacker who successfully exploited any of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
>
> Info: <http://go.microsoft.com/fwlink/?LinkId=198186>
>
> *2.3 MS10-089 Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow
> Elevation of Privilege*
>
> This security update resolves four privately reported vulnerabilities in Forefront Unified Access Gateway (UAG). The most severe of these vulnerabilities could allow elevation of privilege if a user visits an affected Web site using a specially crafted URL. However, an attacker would have no way to force users to visit such a Web site. Instead, an attacker would have to persuade users to visit the Web site, typically by getting them to click a link in an e-mail message or Instant Messenger message that takes users to the attacker's Web site.
>
> Info:  <http://go.microsoft.com/fwlink/?LinkId=199536>
**4.0 Recommendations**
Users are recommended to perform the update immediately. All of the patches could be done almost automatically via the Windows Update application.
The how-to perform of the Windows Update is available at the following URL:
[https://www.mycert.org.my/portal/articles-content?menu=b9f3fdda-c343-4cb4-99a7-a7506cfb13ba&id=62275f48-f209-4440-af1a-c5425c875fa4](https://www.mycert.org.my/portal/articles-content?menu=b9f3fdda-c343-4cb4-99a7-a7506cfb13ba&id=62275f48-f209-4440-af1a-c5425c875fa4
)
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor. For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#fb9682989e898fbb9682989e898fd594899cd59682)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 Reference**
- <http://www.microsoft.com/technet/security/bulletin/ms10-nov.mspx>