Home / bulletins

MS08-032 - Moderate: Cumulative Security Update of ActiveX Kill Bits (950760) - Version:1.1

Posted on 03 April 2009

Moderate

Severity Rating: Moderate - Revision Note: V1.1 (April 1, 2009): Clarified in footnotes under the Affected Software and Severity Ratings tables that Windows Server 2008 server core installations are not affected by the vulnerability discussed in this bulletin, but will still be offered this update. Added an entry in the section, Frequently Asked Questions (FAQ) Related to This Security Update, to reiterate that such installations do not need to install this update.Summary: This security update resolves a publicly reported vulnerability for the Microsoft Speech API. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer and has the Speech Recognition feature in Windows enabled. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. This update also includes a kill bit for software produced by BackWeb.

Link

Other versions

 

TOP