Microsoft security bulletin for October 8 2013

[NICK ADSL UK]

Microsoft security bulletin for October 8 2013
Note: There may be latency issues due to replication, if the page does not display keep refreshing
Today Microsoft released the following Security Bulletin(s).
Microsoft Security Bulletin Summary for October 2013
Note: Security for IT Pros and Computer and Internet Security | Microsoft Safety & Security Center are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.
Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.
Bulletin Summary:
Critical (4)
Microsoft Security Bulletin MS13-080
Cumulative Security Update for Internet Explorer (2879017)
http://technet.microsoft.com/en-us/security/bulletin/ms13-080
Microsoft Security Bulletin MS13-081
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2870008)
Microsoft Security Bulletin MS13-081 - Critical : Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2870008)
Microsoft Security Bulletin MS13-082
Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2878890)
Microsoft Security Bulletin MS13-082 - Critical : Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2878890)
Microsoft Security Bulletin MS13-083
Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2864058)
Microsoft Security Bulletin MS13-083 - Critical : Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2864058)


Important (4)
Microsoft Security Bulletin MS13-084
Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2885089)
Microsoft Security Bulletin MS13-084 - Important : Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2885089)
Microsoft Security Bulletin MS13-085
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080)
Microsoft Security Bulletin MS13-085 - Important : Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080)
Microsoft Security Bulletin MS13-086
Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2885084)
Microsoft Security Bulletin MS13-086 - Important : Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2885084)
Microsoft Security Bulletin MS13-087
Vulnerability in Silverlight Could Allow Information Disclosure (2890788)
Microsoft Security Bulletin MS13-087 - Important : Vulnerability in Silverlight Could Allow Information Disclosure (2890788)

Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.
If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact For home users, no-charge support for security updates (only!) is available by calling 800-MICROSOFT (800-642-7676) in the US or 877-568-2495 in Canada.
As always, download the updates only from the vendors website - visit Windows Update and Office Update or Microsoft Update websites. You may also get the updates thru Automatic Updates functionality in Windows system.
Security Tool
Find out if you are missing important Microsoft product updates by using MBSA.

 

[techtitan100]

i have had no problems so far just waiting on the .net framework update which takes a little longer

 

[kado897]

Well mine was interesting.

30 updates.

Installed and it asked to reboot.
shutdown was normal, if a bit slow.
Reboot got to 32%, sat there for 20 min then rebooted itself
Second reboot got to 32%, sat there for a few minutes then rebooted itself.
Third reboot went through the normal update process apparently OK.

 

[Lady Fitzgerald]

I never do more than 10-15 updates at a time anymore. I start at the bottom of the list and work myself up. Also, if there is an unchecked update, I leave it unchecked until all the other updates are taken care of. I learned the hard way the danger of trying to run too many updates at once.

 

[kado897]

I must admit that I don't usually have that many updates. If the third reboot had failed I was going to restore an image from yesterday and redo the updates a few at a time.

I wonder why you start at the bottom of the list. I would start at the top in case there were any dependencies.

 

[Lady Fitzgerald]

In the case of my notebook, I only dig it out to update it shortly before I go on a trip (the only time I normally use it) which means I often skip a month or few before it gets updated. Starting at the bottom ensures the oldest updates get installed first. It's become a habit for doing it all the time, even on my desktop.

It's been my experience that any updates in a monthly batch that need to run after another one has already run are the ones that are unchecked. That's why I run those last.

I never install updates the day I get notified of them (I have my updates set to notify me that they are available instead of automatically downloading and installing). I wait until Saturday morning to make sure there are no reports of problems and run them after I have run my security scans and local backups the night before (I run a cloud backup every night). I run the scans first, then the backups (the long ones run overnight), then the security updates. I reimage the boot drive after the updates are completed. That way, if I mess up the boot drive, I won't have to download and reinstall the updates again when I restore the drive but I also can restore to back before the updates incase one or more of the updates turn out to be troublesome (images take only 9 minutes to make so it's no big deal to make frequent system images).

The notification that I have updates available just came through (they normally don't show up until Wednesday morning). I have 26 important updates and one optional one I hid (Bing desktop, the same one I've been hiding for the past two months; M$ doesn't seem able to take a hint lately).

 

[kado897]

That makes sense.

 

[crankypenguin]

I thought I would add my 2 cents. I went ahead with the update. Downloaded rather fast, about 4 mins for 20~ updates, then rebooted. Took 2 reboots and now I am back and everything is working fine. I am doing the Microsoft Security Essentials update now, which wasn't checked in the original update package. So everything is up and running ok on my side.
​

 

[kado897]

That's interesting. I thought the multiple reboot was just me. First time I've seen it though.

 

[Teerex]

Just one reboot for me.

 

[COMPUTIAC]

20 updates and one reboot.

 

[Ranger4]

23 updates for me today, Wednesday in Australia, which is when we usually get them. No problems except 1 reboot during set up, otherwise no problems so far.

 

[grits]

I never do more than 10-15 updates at a time anymore. I start at the bottom of the list and work myself up. Also, if there is an unchecked update, I leave it unchecked until all the other updates are taken care of. I learned the hard way the danger of trying to run too many updates at once.

I don't believe I've ever had any "unchecked". Why would it be in the list but unchecked?

 

[grits]

I just spent the last hour fixing my windows 7 64 bit after installing these updates it went like this 1 could not boot into the drive 2 could not repair start up with recovery after several attempts 3 disconnected all external devices apart from mouse and keyboard still could not repair it. so after about 10 times of turning off/on pc it booted up and took 30 mins to get to the desktop can't believe it.

That's why Patch Tuesday scares the h*** out of me. I don't know diddlysquat about what to do if I were to have a problem like that. That's why I'm such a PIA at this forum.

 

[robinb9]

someone want to explain to me why there are 5 usb driver security updates? I am seeing this on windows 7 and 8

 

[grits]

hey robinb9, feeling better? I'm still trying to do Aug. & Sept. MS boo-boo's.

 

[robinb9]

Finally starting too, pollen count got low today, due to the downpour of rain yesterday, so my sinuses do not feel like they want to explode, thanks for asking, i have not done them yet cause i cannot understand why microsoft put 5 of them for usb drivers
Also i read one of these updates, can make you reboot 2x
I forgot which one it was, though

 

[robinb9]

Grits and i cringe every patch tuesday

 

[robinb9]

Also is the one for internet explorer the one that fixes the expoit?

 

[grits]

all i know is that the new one for IE replaces the one we did last month ( KB2870699).

by the way, you're welcome, , i got the sniffles, etc. now, last couple days, not a cold as far as i can tell but have never had allergies in my life.