Home > Products and services > CSIRTUK advisories > Advisories archive > May 2009

Microsoft is investigating new public reports of a new vulnerability in Microsoft DirectX. The vulnerability could allow remote code execution if user opened a specially crafted QuickTime media file.

Microsoft is investigating new public reports of a possible vulnerability in Microsoft Internet Information Services (IIS). An elevation of privilege vulnerability exists in the way that the WebDAV extension for IIS handles HTTP requests. An attacker could exploit this vulnerability by creating a specially crafted anonymous HTTP request to gain access to a location that typically requires authentication.

APPLE-SA-2009-05-12 Security Update 2009-002 / Mac OS X v10.5.7 is now available

Safari 3.2.3 for Windows is now available

Microsoft releases a free monthly security notification advising its customers of updates to its software; the latest security advisory is now available and can be found at: http://www.microsoft.com/technet/security/bulletin/ms09-may.mspx.  To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications on http://www.microsoft.com/technet/security/bulletin/notify.mspx.