The October 2009 Security Updates are now available on the ECE for Windows® Embedded Standard 2009 and/or Microsoft® Windows® XP Embedded with Service Pack 2, Feature Pack 2007, Update Rollup 1.0 and Service Pack 3.
The security updates can be applied to the component database.This download is a cumulative update which incorporates all updates from prior months. Therefore you do not need to download and install previous monthly updates from ECE.
The October Security updates include:
970653 August 2009 cumulative time zone update for Microsoft Windows operating systems
971961 Vulnerability in JScript Scripting Engine Could Allow Remote Code Execution
958869 Vulnerabilities in GDI+ Could Allow Remote Code Execution.
969059 Vulnerability in Indexing Service Could Allow Remote Code Execution
971486 Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege
973525 Cumulative Security Update of ActiveX Kill Bits
974112 Vulnerability in Windows Media Player Could Allow Remote Code Execution