Risk: High
Microsoft identifies four critical issues in September's Patch Tuesday.
The most severe flaw is found in Windows Media Player which could allow remote code execution when a specially crafted audio file is streamed from a Windows Media server.
Slightly less severe are vulnerabilities found in Microsoft Windows GDI+ and Windows Media Encoder 9 Series. Both vulnerabilities could allow remote code execution.
The final flaw is a vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a user clicks a specially crafted OneNote URL.