Microsoft Tuesday Coverage for April MS09-009, MS09-010, MS09-011, MS09-012, MS09-013, MS09-014, MS09-015, MS09-016
Summary: Cisco Talos released detection rules for eight Microsoft advisories in April 2009, covering flaws in Excel, WordPad, DirectShow, the Microsoft network service, WinHTTP, Internet Explorer, the SearchPath function, and ISA Server. The advisories describe remote code execution, privilege escalation, SSL/TLS certificate impersonation, denial of service, and cross-site scripting, with new Snort rules identified by GID 3 and SIDs such as 15465, 15466, 15457, 15470, 15456, and 15474.
What's compelling: MS09-013 lets a remote attacker supply an invalid SSL/TLS certificate and impersonate a legitimate web service, so the trust your users place in a padlock is exactly what this flaw undermines.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026