The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT)
had issued an alert on a critical security vulnerability "Microsoft Security
Update for June 2009" today (10 June 2009). Companies and individuals
should install the latest security patch for their Microsoft Products.

1. Microsoft Active Directory Multiple Vulnerabilities
2. Microsoft Windows Print Spooler Multiple Vulnerabilities
3. Microsoft Internet Explorer Multiple Vulnerabilities
4. Microsoft Office Word Multiple Vulnerabilities
5. Microsoft Office Excel Multiple Vulnerabilities
6. Microsoft Works Converters Buffer Overflow Vulnerability
7. Microsoft RPC Marshalling Engine Vulnerability
8. Microsoft Windows Kernel Multiple Vulnerabilities
9. Microsoft Internet Information Services (IIS) WebDAV Authentication
Bypass Vulnerabilities

This security alert applies to
- - Microsoft Windows 2000
- - Windows XP
- - Windows Server 2003
- - Windows Vista
- - Windows Server 2008
- - Internet Explorer 5.01
- - Internet Explorer 6
- - Internet Explorer 7
- - Internet Explorer 8
- - Microsoft Office 2000
- - Microsoft Office XP
- - Microsoft Office 2003
- - 2007 Microsoft Office System
- - Microsoft Office 2004 for Mac
- - Microsoft Office 2008 for Mac
- - Open XML File Format Converter for Mac
- - Microsoft Office Word 2000
- - Microsoft Office Word 2002
- - Microsoft Office Word 2003
- - Microsoft Office Word 2007
- - Microsoft Office Word Viewer
- - Microsoft Office Excel 2000
- - Microsoft Office Excel 2002
- - Microsoft Office Excel 2003
- - Microsoft Office Excel 2007
- - Microsoft Office Excel Viewer
- - Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007
File Formats
- - Microsoft Office SharePoint Server 2007
- - Microsoft Works 8.5
- - Microsoft Works 9
- - Microsoft Internet Information Services 5.0
- - Microsoft Internet Information Services 5.1
- - Microsoft Internet Information Services 6.0

The vulnerability could be exploited by attackers to remote execution of
arbitrary code, elevation of privilege, disclose sensitive information
and cause a denial of service.

Please read the following URL for more details.
http://www.hkcert.org/english/salert/index.html

Users are cautioned to patch all their systems up-to-date from time to time.

For enquiries and incident reporting, please contact

Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT)

Contact us
==========
If you have any questions or suggestions, please contact us at:
Tel   : (852) 8105 6060
Fax   : (852) 8105 9760
E-mail: hkcert@hkcert.org