20130906, 微软九月安全补丁提前通知

大家好，我们是微软大中华区安全支持团队。

 

在此提前通知各位：微软计划于北京时间9月11日清晨发布14个安全补丁，其中4个为严重等级补丁，另10个为重要等级补丁。4个严重等级补丁修复了 Microsoft Office、Microsoft Server Software、Microsoft Windows 和 Internet Explorer 中的安全漏洞，10个重要等级补丁修复 Microsoft Office、Microsoft Windows 和 Microsoft .NET Framework 中的安全漏洞。

 

下表概述了本次提前公告（按严重等级和公告 ID 排序）：

Bulletin ID	Maximum Severity Rating and Vulnerability Impact	Restart Requirement	Affected Software
Bulletin 1	Critical    Remote Code Execution	May require restart	Microsoft Office,   Microsoft Server Software
Bulletin 2	Critical    Remote Code Execution	May require restart	Microsoft Office
Bulletin 3	Critical    Remote Code Execution	Requires restart	Microsoft Windows,   Internet Explorer
Bulletin 4	Critical    Remote Code Execution	May require restart	Microsoft Windows
Bulletin 5	Important    Remote Code Execution	May require restart	Microsoft Windows
Bulletin 6	Important    Remote Code Execution	May require restart	Microsoft Office
Bulletin 7	Important    Remote Code Execution	May require restart	Microsoft Office
Bulletin 8	Important    Remote Code Execution	May require restart	Microsoft Office
Bulletin 9	Important    Elevation of Privilege	May require restart	Microsoft Office
Bulletin 10	Important    Elevation of Privilege	Requires restart	Microsoft Windows
Bulletin 11	Important    Elevation of Privilege	Requires restart	Microsoft Windows
Bulletin 12	Important    Information Disclosure	May require restart	Microsoft Office
Bulletin 13	Important    Denial of Service	May require restart	Microsoft Windows,   Microsoft .NET Framework
Bulletin 14	Important    Denial of Service	May require restart	Microsoft Windows

 

按照受影响的操作系统分类如下:

Windows XP
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	Critical	Critical	Important	Important	None	Important	None
Windows XP Service Pack 3	Internet Explorer 6    (Critical)     Internet Explorer 7    (Critical)     Internet Explorer 8    (Critical)	Windows XP Service Pack 3   (Critical)	Windows XP Service Pack 3   (Important)	Windows XP Service Pack 3   (Important)	Not applicable	Windows XP Service Pack 3   (Important)	Not applicable
Windows XP Professional x64 Edition Service Pack 2	Internet Explorer 6    (Critical)     Internet Explorer 7    (Critical)     Internet Explorer 8    (Critical)	Windows XP Professional x64 Edition Service Pack 2   (Critical)	Windows XP Professional x64 Edition Service Pack 2   (Important)	Windows XP Professional x64 Edition Service Pack 2   (Important)	Not applicable	Windows XP Professional x64 Edition Service Pack 2   (Important)	Not applicable
Windows Server 2003
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	Moderate	Critical	Important	Important	None	Important	None
Windows Server 2003 Service Pack 2	Internet Explorer 6    (Moderate)     Internet Explorer 7   (Moderate)     Internet Explorer 8   (Moderate)	Windows Server 2003 Service Pack 2   (Critical)	Windows Server 2003 Service Pack 2   (Important)	Windows Server 2003 Service Pack 2   (Important)	Not applicable	Windows Server 2003 Service Pack 2   (Important)	Not applicable
Windows Server 2003 x64 Edition Service Pack 2	Internet Explorer 6    (Moderate)     Internet Explorer 7   (Moderate)     Internet Explorer 8   (Moderate)	Windows Server 2003 x64 Edition Service Pack 2   (Critical)	Windows Server 2003 x64 Edition Service Pack 2   (Important)	Windows Server 2003 x64 Edition Service Pack 2   (Important)	Not applicable	Windows Server 2003 x64 Edition Service Pack 2   (Important)	Not applicable
Windows Server 2003 with SP2 for Itanium-based Systems	Internet Explorer 6    (Moderate)     Internet Explorer 7   (Moderate)	Windows Server 2003 with SP2 for Itanium-based Systems   (Critical)	Windows Server 2003 with SP2 for Itanium-based Systems   (Important)	Windows Server 2003 with SP2 for Itanium-based Systems   (Important)	Not applicable	Windows Server 2003 with SP2 for Itanium-based Systems   (Important)	Not applicable
Windows Vista
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	Critical	None	None	Important	None	Important	Important
Windows Vista Service Pack 2	Internet Explorer 7   (Critical)     Internet Explorer 8   (Critical)     Internet Explorer 9    (Critical)	Not applicable	Windows Vista Service Pack 2   (No severity rating)	Windows Vista Service Pack 2   (Important)	Not applicable	Windows Vista Service Pack 2   (Important)	Windows Vista Service Pack 2   (Important)
Windows Vista x64 Edition Service Pack 2	Internet Explorer 7   (Critical)     Internet Explorer 8   (Critical)     Internet Explorer 9    (Critical)	Not applicable	Windows Vista x64 Edition Service Pack 2   (No severity rating)	Windows Vista x64 Edition Service Pack 2   (Important)	Not applicable	Windows Vista x64 Edition Service Pack 2   (Important)	Windows Vista x64 Edition Service Pack 2   (Important)
Windows Server 2008
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	Moderate	None	None	Important	None	Important	Important
Windows Server 2008 for 32-bit Systems Service Pack 2	Internet Explorer 7   (Moderate)     Internet Explorer 8   (Moderate)     Internet Explorer 9    (Moderate)	Not applicable	Windows Server 2008 for 32-bit Systems Service Pack 2   (No severity rating)	Windows Server 2008 for 32-bit Systems Service Pack 2   (Important)	Not applicable	Windows Server 2008 for 32-bit Systems Service Pack 2   (Important)	Windows Server 2008 for 32-bit Systems Service Pack 2   (Important)
Windows Server 2008 for x64-based Systems Service Pack  2	Internet Explorer 7   (Moderate)     Internet Explorer 8   (Moderate)     Internet Explorer 9    (Moderate)	Not applicable	Windows Server 2008 for x64-based Systems Service Pack  2   (No severity rating)	Windows Server 2008 for x64-based Systems Service Pack  2   (Important)	Not applicable	Windows Server 2008 for x64-based Systems Service Pack  2   (Important)	Windows Server 2008 for x64-based Systems Service Pack  2   (Important)
Windows Server 2008 for Itanium-based Systems Service  Pack 2	Internet Explorer 7   (Moderate)	Not applicable	Windows Server 2008 for Itanium-based Systems Service  Pack 2   (No severity rating)	Windows Server 2008 for Itanium-based Systems Service  Pack 2   (Important)	Not applicable	Windows Server 2008 for Itanium-based Systems Service  Pack 2   (Important)	Not applicable
Windows 7
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	Critical	None	None	Important	Important	Important	Important
Windows 7 for 32-bit Systems Service Pack 1	Internet Explorer 8   (Critical)     Internet Explorer 9    (Critical)     Internet Explorer 10    (Critical)	Not applicable	Not applicable	Windows 7 for 32-bit Systems Service Pack 1   (Important)	Windows 7 for 32-bit Systems Service Pack 1   (Important)	Windows 7 for 32-bit Systems Service Pack 1   (Important)	Windows 7 for 32-bit Systems Service Pack 1   (Important)
Windows 7 for x64-based Systems Service Pack 1	Internet Explorer 8   (Critical)     Internet Explorer 9    (Critical)     Internet Explorer 10    (Critical)	Not applicable	Not applicable	Windows 7 for x64-based Systems Service Pack 1   (Important)	Windows 7 for x64-based Systems Service Pack 1   (Important)	Windows 7 for x64-based Systems Service Pack 1   (Important)	Windows 7 for x64-based Systems Service Pack 1   (Important)
Windows Server 2008 R2
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	Moderate	None	None	Important	Important	Important	Important
Windows Server 2008 R2 for x64-based Systems Service  Pack 1	Internet Explorer 8   (Moderate)     Internet Explorer 9    (Moderate)     Internet Explorer 10    (Moderate)	Not applicable	Not applicable	Windows Server 2008 R2 for x64-based Systems Service  Pack 1   (Important)	Windows Server 2008 R2 for x64-based Systems Service  Pack 1   (Important)	Windows Server 2008 R2 for x64-based Systems Service  Pack 1   (Important)	Windows Server 2008 R2 for x64-based Systems Service  Pack 1   (Important)
Windows Server 2008 R2 for Itanium-based Systems  Service Pack 1	Internet Explorer 8   (Moderate)	Not applicable	Not applicable	Windows Server 2008 R2 for Itanium-based Systems  Service Pack 1   (Important)	Windows Server 2008 R2 for Itanium-based Systems  Service Pack 1   (Important)	Windows Server 2008 R2 for Itanium-based Systems  Service Pack 1   (Important)	Not applicable
Windows 8
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	Critical	None	None	Important	None	Important	Important
Windows 8 for 32-bit Systems	Internet Explorer 10    (Critical)	Not applicable	Not applicable	Windows 8 for 32-bit Systems   (Important)	Not applicable	Windows 8 for 32-bit Systems   (Important)	Windows 8 for 32-bit Systems   (Important)
Windows 8 for 64-bit Systems	Internet Explorer 10    (Critical)	Not applicable	Not applicable	Windows 8 for 64-bit Systems   (Important)	Not applicable	Windows 8 for 64-bit Systems   (Important)	Windows 8 for 64-bit Systems   (Important)
Windows Server 2012
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	Moderate	None	None	Important	None	Important	Important
Windows Server 2012	Internet Explorer 10    (Moderate)	Not applicable	Not applicable	Windows Server 2012   (Important)	Not applicable	Windows Server 2012   (Important)	Windows Server 2012   (Important)
Windows RT
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	Critical	None	None	Important	None	Important	None
Windows RT	Internet Explorer 10    (Critical)	Not applicable	Not applicable	Windows RT   (Important)	Not applicable	Windows RT   (Important)	Not applicable
Server Core installation option
Bulletin Identifier	Bulletin 3	Bulletin 4	Bulletin 5	Bulletin 10	Bulletin 11	Bulletin 13	Bulletin 14
Aggregate Severity Rating	None	None	None	Important	Important	Important	Important
Windows Server 2008 for 32-bit Systems Service Pack 2  (Server Core installation)	Not applicable	Not applicable	Not applicable	Windows Server 2008 for 32-bit Systems Service Pack 2  (Server Core installation)   (Important)	Not applicable	Not applicable	Windows Server 2008 for 32-bit Systems Service Pack 2  (Server Core installation)   (Important)
Windows Server 2008 for x64-based Systems Service Pack  2 (Server Core installation)	Not applicable	Not applicable	Not applicable	Windows Server 2008 for x64-based Systems Service Pack  2 (Server Core installation)   (Important)	Not applicable	Not applicable	Windows Server 2008 for x64-based Systems Service Pack  2 (Server Core installation)   (Important)
Windows Server 2008 R2 for x64-based Systems Service  Pack 1 (Server Core installation)	Not applicable	Not applicable	Not applicable	Windows Server 2008 R2 for x64-based Systems Service  Pack 1 (Server Core installation)   (Important)	Windows Server 2008 R2 for x64-based Systems Service  Pack 1 (Server Core installation)	Windows Server 2008 R2 for x64-based Systems Service  Pack 1 (Server Core installation)   (Important)	Windows Server 2008 R2 for x64-based Systems Service  Pack 1 (Server Core installation)   (Important)
Windows Server 2012 (Server Core installation)	Not applicable	Not applicable	Not applicable	Windows Server 2012 (Server Core installation)   (Important)	Not applicable	Windows Server 2012 (Server Core installation)   (Important)	Windows Server 2012 (Server Core installation)   (Important)

 

受影响的 Office 软件相关信息:

Microsoft Office 2003
Bulletin Identifier	Bulletin 2	Bulletin 6	Bulletin 7	Bulletin 8	Bulletin 9
Aggregate Severity Rating	None	Important	Important	None	None
Microsoft Office 2003 Service Pack 3	Not applicable	Microsoft Office 2003 Service Pack 3   (Important)     Microsoft Word 2003 Service Pack 3   (Important)	Microsoft Excel 2003 Service Pack 3   (Important)	Not applicable	Not applicable
Microsoft Office 2007
Bulletin Identifier	Bulletin 2	Bulletin 6	Bulletin 7	Bulletin 8	Bulletin 9
Aggregate Severity Rating	Critical	Important	Important	Important	None
Microsoft Office 2007 Service Pack 3	Microsoft Outlook 2007 Service Pack 3   (Critical)	Microsoft Office 2007 Service Pack 3   (Important)     Microsoft Word 2007 Service Pack 3   (Important)	Microsoft Excel 2007 Service Pack 3   (Important)	Microsoft Access 2007 Service Pack 3   (Important)	Not applicable
Microsoft Office 2010
Bulletin Identifier	Bulletin 2	Bulletin 6	Bulletin 7	Bulletin 8	Bulletin 9
Aggregate Severity Rating	Critical	Important	Important	Important	Important
Microsoft Office 2010 Service Pack 1 (32-bit editions)	Microsoft Outlook 2010 Service Pack 1 (32-bit editions)    (Critical)	Microsoft Word 2010 Service Pack 1 (32-bit editions)   (Important)	Microsoft Excel 2010 Service Pack 1 (32-bit editions)   (Important)	Microsoft Access 2010 Service Pack 1 (32-bit editions)   (Important)	Microsoft Pinyin IME 2010 (32-bit version)   (Important)
Microsoft Office 2010 Service Pack 2 (32-bit editions)	Microsoft Outlook 2010 Service Pack 2 (32-bit editions)    (Critical)	Microsoft Word 2010 Service Pack 2 (32-bit editions)   (Important)	Microsoft Excel 2010 Service Pack 2 (32-bit editions)   (Important)	Microsoft Access 2010 Service Pack 2 (32-bit editions)   (Important)	Not applicable
Microsoft Office 2010 Service Pack 1 (64-bit editions)	Microsoft Outlook 2010 Service Pack 1 (64-bit editions)    (Critical)	Microsoft Word 2010 Service Pack 1 (64-bit editions)   (Important)	Microsoft Excel 2010 Service Pack 1 (64-bit editions)   (Important)	Microsoft Access 2010 Service Pack 1 (64-bit editions)   (Important)	Microsoft Pinyin IME 2010 (64-bit version)   (Important)
Microsoft Office 2010 Service Pack 2 (64-bit editions)	Microsoft Outlook 2010 Service Pack 2 (64-bit editions)    (Critical)	Microsoft Word 2010 Service Pack 2 (64-bit editions)   (Important)	Microsoft Excel 2010 Service Pack 2 (64-bit editions)   (Important)	Microsoft Access 2010 Service Pack 2 (64-bit editions)   (Important)	Not applicable
Microsoft Office 2013
Bulletin Identifier	Bulletin 2	Bulletin 6	Bulletin 7	Bulletin 8	Bulletin 9
Aggregate Severity Rating	None	None	Important	Important	None
Microsoft Office 2013 (32-bit editions)	Not applicable	Not applicable	Microsoft Excel 2013 (32-bit editions)   (Important)	Microsoft Access 2013 (32-bit editions)   (Important)	Not applicable
Microsoft Office 2013 (64-bit editions)	Not applicable	Not applicable	Microsoft Excel 2013 (64-bit editions)   (Important)	Microsoft Access 2013 (64-bit editions)   (Important)	Not applicable
Microsoft Office 2013 RT	Not applicable	Not applicable	Microsoft Excel 2013 RT   (Important)	Not applicable	Not applicable
Microsoft Office for Mac
Bulletin Identifier	Bulletin 2	Bulletin 6	Bulletin 7	Bulletin 8	Bulletin 9
Aggregate Severity Rating	None	None	Important	None	None
Microsoft Office for Mac 2011	Not applicable	Not applicable	Microsoft Office for Mac 2011   (Important)	Not applicable	Not applicable
Other Microsoft Office Software
Bulletin Identifier	Bulletin 2	Bulletin 6	Bulletin 7	Bulletin 8	Bulletin 9
Aggregate Severity Rating	None	Important	Important	None	None
Microsoft Office Compatibility Pack Service Pack 3	Not applicable	Microsoft Office Compatibility Pack Service Pack 3   (Important)	Microsoft Office Compatibility Pack Service Pack 3   (Important)	Not applicable	Not applicable
Microsoft Word Viewer	Not applicable	Microsoft Word Viewer   (Important)	Not applicable	Not applicable	Not applicable
Microsoft Excel Viewer	Not applicable	Not applicable	Microsoft Excel Viewer   (Important)	Not applicable	Not applicable

  

受影响的 Server 软件:

Microsoft SharePoint Portal Server 2003
Bulletin Identifier	Bulletin 1
Aggregate Severity Rating	Critical
Microsoft SharePoint Portal Server 2003 Service Pack 3	Microsoft Windows SharePoint Services 2.0   (Critical)
Microsoft SharePoint Server 2007
Bulletin Identifier	Bulletin 1
Aggregate Severity Rating	Critical
Microsoft SharePoint Server 2007 Service Pack 3 (32-bit  editions)	Microsoft Windows SharePoint Services 3.0 Service Pack  3 (32-bit versions)   (Critical)
Microsoft SharePoint Server 2007 Service Pack 3 (64-bit  editions)	Microsoft Windows SharePoint Services 3.0 Service Pack  3 (64-bit versions)   (Critical)
Microsoft SharePoint Server 2010
Bulletin Identifier	Bulletin 1
Aggregate Severity Rating	Critical
Microsoft SharePoint Server 2010 Service Pack 1	Microsoft SharePoint Foundation 2010 Service Pack 1   (Critical)     Microsoft SharePoint Server 2010 Service Pack 1   (Critical)
Microsoft SharePoint Server 2010 Service Pack 2	Microsoft SharePoint Foundation 2010 Service Pack 2   (Critical)     Microsoft SharePoint Server 2010 Service Pack 2   (Critical)
Microsoft SharePoint Server 2013
Bulletin Identifier	Bulletin 1
Aggregate Severity Rating	Important
Microsoft SharePoint Server 2013	Microsoft SharePoint Foundation 2013   (Important)     Microsoft SharePoint Server 2013   (Important)

 

受影响的 Office 服务和 Web APP:

Microsoft SharePoint Server 2007
Bulletin Identifier	Bulletin 1
Aggregate Severity Rating	Important
Microsoft SharePoint Server 2007 Service Pack 3 (32-bit  editions)	Excel Services   (Important)
Microsoft SharePoint Server 2007 Service Pack 3 (64-bit  editions)	Excel Services   (Important)
Microsoft SharePoint Server 2010
Bulletin Identifier	Bulletin 1
Aggregate Severity Rating	Critical
Microsoft SharePoint Server 2010 Service Pack 1	Excel Services   (Critical)     Microsoft Business Productivity Servers   (Critical)     Word Automation Services   (Critical)
Microsoft SharePoint Server 2010 Service Pack 2	Excel Services   (Critical)     Microsoft Business Productivity Servers   (Critical)     Word Automation Services   (Critical)
Microsoft Office Web Apps 2010
Bulletin Identifier	Bulletin 1
Aggregate Severity Rating	Critical
Microsoft Office Web Apps 2010 Service Pack 1	Microsoft Excel Web App 2010 Service Pack 1   (Critical)     Microsoft Word Web App 2010 Service Pack 1   (Critical)
Microsoft Office Web Apps 2010 Service Pack 2	Microsoft Excel Web App 2010 Service Pack 2   (Critical)     Microsoft Word Web App 2010 Service Pack 2   (Critical)

  

以下为提前通知的文章全文（英文），请各位先行评估了解受影响的系统。

Microsoft Security Bulletin Advance Notification for September 2013

http://technet.microsoft.com/en-us/security/bulletin/ms13-sep

微软大中华区安全支持团队

2013年9月6日