May 2013 Microsoft Security Bulletin Release

As part of the monthly security bulletin release cycle, Microsoft provides advance notification to our customers concerning the number of new security updates being released, products affected, and the aggregate maximum severity. This is intended to help our customers plan for the deployment of these security updates more effectively.

On May 14, 2013, Microsoft is planning to release ten new security bulletins. Below is a summary.

NEW BULLETIN SUMMARY

Bulletin ID Maximum Severity Rating Vulnerability Impact Restart Requirement Affected Software* Bulletin 1 Critical Remote Code Execution May require restart Internet Explorer on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, and Windows RT. Bulletin 2 Critical Remote Code Execution Requires restart Internet Explorer (8 & 9) on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2. Bulletin 3 Important Denial of Service Requires restart Microsoft Windows 8, Windows Server 2012, and Windows RT. Bulletin 4 Important Spoofing May require restart Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, and Windows RT. Bulletin 5 Important Remote Code Execution May require restart Microsoft Communicator 2007, Lync 2010, Lync 2010 Attendee, and Lync Server 2013. Bulletin 6 Important Remote Code Execution May require restart Microsoft Publisher 2003, Publisher 2007, and Publisher 2010. Bulletin 7 Important Remote Code Execution May require restart Microsoft Word 2003 and Word Viewer. Bulletin 8 Important Information Disclosure May require restart Microsoft Visio 2003, Visio 2007, and Visio 2010. Bulletin 9 Important Information Disclosure May require restart Windows Essentials 2011 and Windows Essentials 2012. Bulletin 10 Important Elevation of Privilege Requires restart Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, and Windows RT.

Advance Notification Webpage:The full version of the Microsoft Security Bulletin Advance Notification for this month can be found at http://technet.microsoft.com/security/bulletin/ms13-may.

Microsoft Windows Malicious Software Removal Tool: Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

Monthly Security Bulletin Webcast: To address customer questions on these bulletins Microsoft will host a webcast next Wednesday, May 15, 2013, at 11:00 A.M. Pacific Time (U.S. and Canada). Registration for this event and other details can be found at http://technet.microsoft.com/security/bulletin/.