Microsoft Tuesday Coverage for September 2009

Summary: Cisco Talos covered five Microsoft issues in its September 2009 Patch Tuesday roundup: advisories MS09-045 through MS09-048 describe programming errors in the JScript scripting engine, the DHTML Editing Component ActiveX control, Windows media file parsing, and the Windows TCP/IP stack, each of which may allow a remote attacker to execute code. A separate SMB2.0 vulnerability may allow a remote attacker to cause a denial of service against a vulnerable machine.
Bottom line: Four of the five issues carry remote code execution, and one sits in the TCP/IP stack itself - the layer every other control assumes is trustworthy.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026