Microsoft Security Bulletin Summary for December 2013
MS13-096
Affected Software:
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
— Microsoft Office 2003 Service Pack 3
— Microsoft Office 2007 Service Pack 3
— Microsoft Office 2010 Service Pack 1 (32-bit editions)
— Microsoft Office 2010 Service Pack 1 (64-bit editions)
— Microsoft Office 2010 Service Pack 2 (32-bit editions)
— Microsoft Office 2010 Service Pack 2 (64-bit editions)
— Microsoft Office Compatibility Pack Service Pack 3
— Microsoft Word Viewer
— Microsoft Excel Viewer
— Microsoft PowerPoint 2010 Viewer Service Pack 1
— Microsoft PowerPoint 2010 Viewer Service Pack 2
— Microsoft Lync 2010 (32-bit)
— Microsoft Lync 2010 (64-bit)
— Microsoft Lync 2010 Attendee (user level install)
— Microsoft Lync 2010 Attendee (admin level install)
— Microsoft Lync 2013 (32-bit)
— Microsoft Lync Basic 2013 (32-bit)
— Microsoft Lync 2013 (64-bit)
— Microsoft Lync Basic 2013 (64-bit)
Impact: Remote Code Execution
Version Number: 1.0
MS13-097
Affected Software:
– Windows XP Service Pack 3
— Internet Explorer 6
— Internet Explorer 7
— Internet Explorer 8
– Windows XP Professional x64 Edition Service Pack 2
— Internet Explorer 6
— Internet Explorer 7
— Internet Explorer 8
– Windows Server 2003 Service Pack 2
— Internet Explorer 6
— Internet Explorer 7
— Internet Explorer 8
– Windows Server 2003 x64 Edition Service Pack 2
— Internet Explorer 6
— Internet Explorer 7
— Internet Explorer 8
– Windows Server 2003 with SP2 for Itanium-based Systems
— Internet Explorer 6
— Internet Explorer 7
– Windows Vista Service Pack 2
— Internet Explorer 7
— Internet Explorer 8
— Internet Explorer 9
– Windows Vista x64 Edition Service Pack 2
— Internet Explorer 7
— Internet Explorer 8
— Internet Explorer 9
– Windows Server 2008 for 32-bit Systems Service Pack 2
— Internet Explorer 7
— Internet Explorer 8
— Internet Explorer 9 (Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for x64-based Systems Service Pack 2
— Internet Explorer 7
— Internet Explorer 8
— Internet Explorer 9 (Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2:
— Internet Explorer 7
– Windows 7 for 32-bit Systems Service Pack 1
— Internet Explorer 8
— Internet Explorer 9
— Internet Explorer 10
— Internet Explorer 11
– Windows 7 for x64-based Systems Service Pack 1
— Internet Explorer 8
— Internet Explorer 9
— Internet Explorer 10
— Internet Explorer 11
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
— Internet Explorer 8
— Internet Explorer 9
— Internet Explorer 10
— Internet Explorer 11 (Windows Server 2008 R2 Server Core installation not affected)
– Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
— Internet Explorer 8
– Windows 8 for 32-bit Systems
— Internet Explorer 10
– Windows 8 for x64-based Systems
— Internet Explorer 10
– Windows Server 2012
— Internet Explorer 10 (Windows Server 2012 Server Core installation not affected)
– Windows RT
— Internet Explorer 10
– Windows 8.1 for 32-bit Systems
— Internet Explorer 11
– Windows 8.1 for x64-based Systems
— Internet Explorer 11
– Windows Server 2012 R2
— Internet Explorer 11 (Windows Server 2012 R2 Server Core installation not affected)
– Windows RT 8.1
— Internet Explorer 11
Impact: Remote Code Execution
Version Number: 1.0
MS13-098
Affected Software:
– Windows XP Service Pack 3
– Windows XP Professional x64 Edition Service Pack 2
– Windows Server 2003 Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 with SP2 for Itanium-based Systems
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
– Windows 8 for 32-bit Systems
– Windows 8 for x64-based Systems
– Windows 8.1 for 32-bit Systems
– Windows 8.1 for x64-based Systems
– Windows Server 2012 (Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2 (Windows Server 2012 R2 Server Core installation affected)
– Windows RT
– Windows RT 8.1
Impact: Remote Code Execution
Version Number: 1.0
MS13-099
Affected Software:
– Windows XP Service Pack 3
— Windows Script 5.7
– Windows XP Professional x64 Edition Service Pack 2
— Windows Script 5.6
— Windows Script 5.7
– Windows Server 2003 Service Pack 2
— Windows Script 5.6
— Windows Script 5.7
– Windows Server 2003 x64 Edition Service Pack 2
— Windows Script 5.6
— Windows Script 5.7
– Windows Server 2003 with SP2 for Itanium-based Systems
— Windows Script 5.6
— Windows Script 5.7
– Windows Vista Service Pack 2
— Windows Script 5.7
– Windows Vista x64 Edition Service Pack 2
— Windows Script 5.7
– Windows Server 2008 for 32-bit Systems Service Pack 2
— Windows Script 5.7 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2
— Windows Script 5.7 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
— Windows Script 5.7
– Windows 7 for 32-bit Systems Service Pack 1
— Windows Script 5.8
– Windows 7 for x64-based Systems Service Pack 1
— Windows Script 5.8
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
— Windows Script 5.8 (Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
— Windows Script 5.8
– Windows 8 for 32-bit Systems
— Windows Script 5.8
– Windows 8 for x64-based Systems
— Windows Script 5.8
– Windows 8.1 for 32-bit Systems
— Windows Script 5.8
– Windows 8.1 for x64-based Systems
— Windows Script 5.8
– Windows Server 2012
— Windows Script 5.8 (Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2
— Windows Script 5.8 (Windows Server 2012 R2 Server Core installation affected)
– Windows RT
— Windows Script 5.8
– Windows RT 8.1
— Windows Script 5.8
Impact: Remote Code Execution
Version Number: 1.0
MS13-100
Affected Software:
– Microsoft Business Productivity Servers on Microsoft SharePoint Server 2010 Service Pack 1
– Microsoft Business Productivity Servers on Microsoft SharePoint Server 2010 Service Pack 2
– Microsoft SharePoint Server 2013
– Microsoft Business Productivity Servers on Microsoft SharePoint Server 2013
– Excel Services on Microsoft SharePoint Server 2013
– Microsoft Office Web Apps Server 2013
Impact: Remote Code Execution
Version Number: 1.0
MS13-101
Affected Software:
– Windows XP Service Pack 3
– Windows XP Professional x64 Edition Service Pack 2
– Windows Server 2003 Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 with SP2 for Itanium-based Systems
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
– Windows 8 for 32-bit Systems
– Windows 8 for x64-based Systems
– Windows 8.1 for 32-bit Systems
– Windows 8.1 for x64-based Systems
– Windows Server 2012 (Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2 (Windows Server 2012 R2 Server Core installation affected)
– Windows RT
– Windows RT 8.1
Impact: Elevation of Privilege
Version Number: 1.0
MS13-102
Affected Software:
– Windows XP Service Pack 3
– Windows XP Professional x64 Edition Service Pack 2
– Windows Server 2003 Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 with SP2 for Itanium-based Systems
Impact: Elevation of Privilege
Version Number: 1.0
MS13-103
Affected Software:
– ASP.NET SignalR 1.1.x
– ASP.NET SignalR 2.0.x
– Microsoft Visual Studio Team Foundation Server 2013
Impact: Elevation of Privilege
Version Number: 1.0
MS13-104
Affected Software:
– Microsoft Office 2013 (32-bit editions)
– Microsoft Office 2013 (64-bit editions)
– Microsoft Office 2013 RT
Impact: Information Disclosure
Version Number: 1.0
MS13-105
Affected Software:
– Microsoft Exchange Server 2007 Service Pack 3
– Microsoft Exchange Server 2010 Service Pack 2
– Microsoft Exchange Server 2010 Service Pack 3
– Microsoft Exchange Server 2013 Cumulative Update 2
– Microsoft Exchange Server 2013 Cumulative Update 3
Impact: Remote Code Execution
Version Number: 1.0
MS13-106
Affected Software:
– Microsoft Office 2007 Service Pack 3
– Microsoft Office 2010 Service Pack 1 (32-bit editions)
– Microsoft Office 2010 Service Pack 1 (64-bit editions)
– Microsoft Office 2010 Service Pack 2 (32-bit editions)
– Microsoft Office 2010 Service Pack 2 (64-bit editions)
Impact: Security Feature Bypass
Version Number: 1.0