Microsoft Security Bulletin Summary for May 2013

This bulletin summary lists security bulletins released for May 2013.

With the release of the bulletins for May 2013, this bulletin summary replaces the bulletin advance notification originally issued on May 9, 2013. For more information about the bulletin advance notification service, see http://technet.microsoft.com/security/bulletin/advance.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications at http://technet.microsoft.com/security/dd252948.

Critical Security Bulletins
============================
Bulletin 1
Affected Software:
– Windows XP Service Pack 3
— Internet Explorer 6
— Internet Explorer 7
— Internet Explorer 8
– Windows XP Professional x64 Edition Service Pack 2
— Internet Explorer 6
— Internet Explorer 7
— Internet Explorer 8
– Windows Server 2003 Service Pack 2
— Internet Explorer 6
— Internet Explorer 7
— Internet Explorer 8
– Windows Server 2003 x64 Edition Service Pack 2
— Internet Explorer 6
— Internet Explorer 7
— Internet Explorer 8
– Windows Server 2003 with SP2 for Itanium-based Systems
— Internet Explorer 6
— Internet Explorer 7
– Windows Vista Service Pack 2
— Internet Explorer 7
— Internet Explorer 8
— Internet Explorer 9
– Windows Vista x64 Edition Service Pack 2
— Internet Explorer 7
— Internet Explorer 8
— Internet Explorer 9
– Windows Server 2008 for 32-bit Systems Service Pack 2 (Windows Server 2008 Server Core installation not affected)
— Internet Explorer 7
— Internet Explorer 8
— Internet Explorer 9
– Windows Server 2008 for x64-based Systems Service Pack 2 (Windows Server 2008 Server Core installation not affected)
— Internet Explorer 7
— Internet Explorer 8
— Internet Explorer 9
– Windows Server 2008 for Itanium-based Systems Service Pack 2
— Internet Explorer 7
– Windows 7 for 32-bit Systems Service Pack 1
— Internet Explorer 8
— Internet Explorer 9
— Internet Explorer 10
– Windows 7 for x64-based Systems Service Pack 1
— Internet Explorer 8
— Internet Explorer 9
— Internet Explorer 10
– Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Windows Server 2008 R2 Server Core installation not affected)
— Internet Explorer 8
— Internet Explorer 9
— Internet Explorer 10
-Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
— Internet Explorer 8
– Windows 8 for 32-bit Systems
— Internet Explorer 10
– Windows 8 for 64-bit Systems
— Internet Explorer 10
– Windows Server 2012 (Windows Server 2012 Server Core installation not affected)
— Internet Explorer 10
– Windows RT
— Internet Explorer 10
Impact: Remote Code Execution
Version Number: 1.0

Bulletin 2
Affected Software:
– Windows XP Service Pack 3
— Internet Explorer 8
– Windows XP Professional x64 Edition Service Pack 2
— Internet Explorer 8
– Windows Server 2003 Service Pack 2
— Internet Explorer 8
– Windows Server 2003 x64 Edition Service Pack 2
— Internet Explorer 8
– Windows Vista Service Pack 2:
— Internet Explorer 8
— Internet Explorer 9
– Windows Vista x64 Edition Service Pack 2
— Internet Explorer 8
— Internet Explorer 9
– Windows Server 2008 for 32-bit Systems Service Pack 2 (Windows Server 2008 Server Core installation not affected)
— Internet Explorer 8
— Internet Explorer 9
– Windows Server 2008 for x64-based Systems Service Pack 2 (Windows Server 2008 Server Core installation not affected)
— Internet Explorer 8
— Internet Explorer 9
– Windows 7 for 32-bit Systems Service Pack 1
— Internet Explorer 8
— Internet Explorer 9
– Windows 7 for x64-based Systems Service Pack 1
— Internet Explorer 8
— Internet Explorer 9
– Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Windows Server 2008 R2 Server Core installation not affected)
— Internet Explorer 8
— Internet Explorer 9
– Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
— Internet Explorer 8
Impact: Remote Code Execution
Version Number: 1.0

Important Security Bulletins
============================
Bulletin 3
Affected Software:
– Windows 8 for 32-bit Systems
– Windows 8 for 64-bit Systems
– Windows Server 2012 (Windows Server 2012 Server Core installation affected)
– Windows RT
Impact: Denial of Service
Version Number: 1.0

Bulletin 4
Affected Software:
– Windows XP Service Pack 3
– Windows XP Professional x64 Edition Service Pack 2
– Windows Server 2003 Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 with SP2 for Itanium-based Systems
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2 (Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for x64-based Systems Service Pack 2 (Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
– Windows 8 for 32-bit Systems
– Windows 8 for 64-bit Systems
– Windows Server 2012 (Windows Server 2012 Server Core installation affected)
– Windows RT
Impact: Spoofing
Version Number: 1.0

Bulletin 5
Affected Software:
– Microsoft Communicator 2007 R2
– Microsoft Lync 2010 (32-bit)
– Microsoft Lync 2010 (64-bit)
– Microsoft Lync 2010 Attendee (admin level install)
– Microsoft Lync 2010 Attendee (user level install)
– Microsoft Lync Server 2013
Impact: Remote Code Execution
Version Number: 1.0

Bulletin 6
Affected Software:
– Microsoft Publisher 2003 Service Pack 3
– Microsoft Publisher 2007 Service Pack 3
– Microsoft Publisher 2010 Service Pack 1 (32-bit editions)
– Microsoft Publisher 2010 Service Pack 1 (64-bit editions)
Impact: Remote Code Execution
Version Number: 1.0

Bulletin 7
Affected Software:
– Microsoft Word 2003 Service Pack 3
– Microsoft Word Viewer
Impact: Remote Code Execution
Version Number: 1.0

Bulletin 8
Affected Software:
– Microsoft Visio 2003 Service Pack 3
– Microsoft Visio 2007 Service Pack 3
– Microsoft Visio 2010 Service Pack 1 (32-bit editions)
– Microsoft Visio 2010 Service Pack 1 (64-bit editions)
Impact: Information Disclosure
Version Number: 1.0

Bulletin 9
Affected Software:
– Windows Essentials 2011
– Windows Essentials 2012
Impact: Information Disclosure
Version Number: 1.0

Bulletin 10
Affected Software:
– Windows XP Service Pack 3
– Windows XP Professional x64 Edition Service Pack 2
– Windows Server 2003 Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 with SP2 for Itanium-based Systems
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2 (Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
– Windows 8 for 32-bit Systems
– Windows 8 for 64-bit Systems
– Windows Server 2012 (Windows Server 2012 Server Core installation affected)
– Windows RT
Impact: Elevation of Privilege
Version Number: 1.0