[BigFix-Announcements-Japan] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Patches for Windows (Japanese)'

Fri Jun 13 02:31:40 PDT 2014

Fixlet Site - 'Patches for Windows (Japanese)'
Current Version: 583	Published: Thu, 12 Jun 2014 13:49:49  GMT

New Fixlets:
============

***************************************************************
Title: MS14-030: Vulnerability in Remote Desktop Could Allow Tampering - Windows Server 2012 R2 Gold - KB2965788 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403001
Fixlet Link: http://technet.microsoft.com/library/security/MS14-030

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow tampering if an attacker gains access to the same network segment as the targeted system during an active Remote Desktop Protocol (RDP) session, and then sends specially crafted RDP packets to the targeted system. By default, RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-030: Vulnerability in Remote Desktop Could Allow Tampering - Windows 7 SP1 - KB2965788 (Japanese)
Severity: Important
Fixlet ID: 1403003
Fixlet Link: http://technet.microsoft.com/library/security/MS14-030

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow tampering if an attacker gains access to the same network segment as the targeted system during an active Remote Desktop Protocol (RDP) session, and then sends specially crafted RDP packets to the targeted system. By default, RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-030: Vulnerability in Remote Desktop Could Allow Tampering - Windows 8.1 Gold - KB2965788 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403005
Fixlet Link: http://technet.microsoft.com/library/security/MS14-030

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow tampering if an attacker gains access to the same network segment as the targeted system during an active Remote Desktop Protocol (RDP) session, and then sends specially crafted RDP packets to the targeted system. By default, RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-030: Vulnerability in Remote Desktop Could Allow Tampering - Windows 8 Gold - KB2965788 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403007
Fixlet Link: http://technet.microsoft.com/library/security/MS14-030

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow tampering if an attacker gains access to the same network segment as the targeted system during an active Remote Desktop Protocol (RDP) session, and then sends specially crafted RDP packets to the targeted system. By default, RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-030: Vulnerability in Remote Desktop Could Allow Tampering - Windows Server 2012 Gold - KB2965788 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403009
Fixlet Link: http://technet.microsoft.com/library/security/MS14-030

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow tampering if an attacker gains access to the same network segment as the targeted system during an active Remote Desktop Protocol (RDP) session, and then sends specially crafted RDP packets to the targeted system. By default, RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-030: Vulnerability in Remote Desktop Could Allow Tampering - Windows 7 SP1 - KB2965788 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403011
Fixlet Link: http://technet.microsoft.com/library/security/MS14-030

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow tampering if an attacker gains access to the same network segment as the targeted system during an active Remote Desktop Protocol (RDP) session, and then sends specially crafted RDP packets to the targeted system. By default, RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-030: Vulnerability in Remote Desktop Could Allow Tampering - Windows 8.1 Gold - KB2965788 (Japanese)
Severity: Important
Fixlet ID: 1403013
Fixlet Link: http://technet.microsoft.com/library/security/MS14-030

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow tampering if an attacker gains access to the same network segment as the targeted system during an active Remote Desktop Protocol (RDP) session, and then sends specially crafted RDP packets to the targeted system. By default, RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-030: Vulnerability in Remote Desktop Could Allow Tampering - Windows 8 Gold - KB2965788 (Japanese)
Severity: Important
Fixlet ID: 1403015
Fixlet Link: http://technet.microsoft.com/library/security/MS14-030

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow tampering if an attacker gains access to the same network segment as the targeted system during an active Remote Desktop Protocol (RDP) session, and then sends specially crafted RDP packets to the targeted system. By default, RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows 8 Gold - KB2957189 (Japanese)
Severity: Important
Fixlet ID: 1403101
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows Server 2012 R2 Gold - KB2957189 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403103
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows 8.1 Gold - KB2957189 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403105
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows Server 2008 SP2 - KB2957189 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403107
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows 7 SP1 - KB2957189 (Japanese)
Severity: Important
Fixlet ID: 1403109
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows Server 2008 SP2 - KB2957189 (Japanese)
Severity: Important
Fixlet ID: 1403111
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows 8 Gold - KB2957189 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403113
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows 7 SP1 - KB2957189 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403115
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows 8.1 Gold - KB2957189 (Japanese)
Severity: Important
Fixlet ID: 1403117
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows Vista SP2 - KB2957189 (Japanese)
Severity: Important
Fixlet ID: 1403119
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows Server 2012 Gold - KB2957189 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403121
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows Server 2008 R2 SP1 - KB2957189 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403123
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service - Windows Vista SP2 - KB2957189 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403125
Fixlet Link: http://technet.microsoft.com/library/security/MS14-031

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-032: Vulnerability in Microsoft Lync Server Could Allow Information Disclosure - Lync Server 2013 - KB2963288 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403201
Fixlet Link: http://technet.microsoft.com/library/security/MS14-032

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Lync Server. The vulnerability could allow information disclosure if a user tries to join a Lync meeting by clicking a specially crafted meeting URL. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-032: Vulnerability in Microsoft Lync Server Could Allow Information Disclosure - Lync Server 2010 - KB2963286 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403203
Fixlet Link: http://technet.microsoft.com/library/security/MS14-032

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Lync Server. The vulnerability could allow information disclosure if a user tries to join a Lync meeting by clicking a specially crafted meeting URL. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2008 SP2 - KB2939576 (x64) (Japanese)
Severity: Low
Fixlet ID: 1403301
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2012 Gold - KB2939576 (x64) (Japanese)
Severity: Low
Fixlet ID: 1403303
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows 8 Gold - KB2939576 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403305
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2008 R2 SP1 - KB2939576 (x64) (Japanese)
Severity: Low
Fixlet ID: 1403307
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows 7 SP1 - KB2939576 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403309
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Vista SP2 - KB2939576 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403311
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2003 SP2 - KB2939576 (Japanese)
Severity: Low
Fixlet ID: 1403313
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2003 SP2 - KB2939576 - CORRUPT PATCH (Japanese)
Severity: Low
Fixlet ID: 1403314
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2003 SP2 - KB2957482 (Japanese)
Severity: Low
Fixlet ID: 1403315
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows 7 SP1 - KB2939576 (Japanese)
Severity: Important
Fixlet ID: 1403317
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2012 R2 Gold - KB2939576 (x64) (Japanese)
Severity: Low
Fixlet ID: 1403319
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows 8.1 Gold - KB2939576 (Japanese)
Severity: Important
Fixlet ID: 1403321
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2003 SP2 - KB2939576 (x64) (Japanese)
Severity: Low
Fixlet ID: 1403323
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2003 SP2 - KB2939576 (x64) - CORRUPT PATCH (Japanese)
Severity: Low
Fixlet ID: 1403324
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2008 SP2 - KB2939576 (Japanese)
Severity: Low
Fixlet ID: 1403325
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Vista SP2 - KB2939576 (Japanese)
Severity: Important
Fixlet ID: 1403327
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2003 SP2 - KB2957482 (x64) (Japanese)
Severity: Low
Fixlet ID: 1403329
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows 8.1 Gold - KB2939576 (x64) (Japanese)
Severity: Important
Fixlet ID: 1403331
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows 8 Gold - KB2939576 (Japanese)
Severity: Important
Fixlet ID: 1403333
Fixlet Link: http://technet.microsoft.com/library/security/MS14-033

Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a logged on user visits a specially crafted website that is designed to invoke Microsoft XML Core Services (MSXML) through Internet Explorer. In all cases, however, an attacker would have no way to force users to visit such websites. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger request that takes users to the attacker's website. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-034: Vulnerability in Microsoft Word Could Allow Remote Code Execution - Office 2007 SP3 - Word 2007 SP3 - KB2880515 (Japanese)
Severity: Important
Fixlet ID: 1403401
Fixlet Link: http://technet.microsoft.com/library/security/MS14-034

Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Word. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-034: Vulnerability in Microsoft Word Could Allow Remote Code Execution - Office Compatibility Pack SP3 - KB2880513 (Japanese)
Severity: Important
Fixlet ID: 1403403
Fixlet Link: http://technet.microsoft.com/library/security/MS14-034

Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Word. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability.

***************************************************************
Title: MS14-035: Cumulative Security Update for Internet Explorer - Windows 7 SP1 - IE 9 - KB2957689 (x64) (Japanese)
Severity: Critical
Fixlet ID: 1403501
Fixlet Link: http://technet.microsoft.com/library/security/MS14-035

Fixlet Description: Microsoft has released a security update that resolves two publicly disclosed vulnerabilities and fifty-seven privately reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. 