As expected, Microsoft today released its regular monthly batch of security bulletins and associated patches. This month there are seven bulletins, addressing 20 identified vulnerabilities. Four bulletins have a Critical severity rating, and three are rated Important. Two of the bulletins are for Windows and its components; every supported version of Windows is affected. One of the bulletins, rated Critical, affects all desktop/client versions of Windows (XP, Vista, 7, 8, and RT).
There are four bulletins that affect Microsoft Office, two of which are rated Critical, and two Important. Some of these also affect Office for Mac.
There is one bulletin for Microsoft Silverlight, rated Critical; this also applies to Silverlight installations on Mac systems. One of the bulletins (MS13-024) also applies to SharePoint.
Microsoft says that the two Windows bulletins will definitely require a system restart. The Silverlight bulletin and one of the Office bulletins will not require a restart. The other bulletins may require one, depending on the system’s configuration.
For more detailed information, and download links, please see the Microsoft Security Bulletin Summary for March 2013.
As usual, I recommend applying these patches to your systems as soon as you conveniently can.
The handlers at the SANS Internet Storm Center have posted their usual summary and evaluation of this month’s patches.