July 2007 Monthly Release
Hello everyone,
This is Christopher Budd and I wanted to let you know that we’ve posted our bulletins for the July 2007 monthly release.
This month, we’ve released six new bulletins. Three of these have a maximum severity of Critical
- MS07-036: This security update resolves three vulnerabilities that could allow remote code execution if a user opens a specially crafted Excel file.
- MS07-039: This security update resolves two vulnerabilities in implementations of Active Directory on Windows 2000 Server and Windows 2003 Server that could allow remote code execution.**
- MS07-040: This security update resolves two vulnerabilities that could allow remote code execution and one information disclosure vulnerability on client systems with .NET Framework installed.**
Two bulletins have a maximum severity of Important:
- MS07-037: This security update resolves a vulnerability that could allow remote code execution if a user viewed a specially crafted Microsoft Office Publisher 2007 file.**
- MS07-041: This security update resolves a vulnerability which could allow remote code execution if an attacker sent specially crafted URL requests to a Web page hosted by Internet Information Services (IIS) 5.1 on Windows XP Professional Service Pack 2.**
One bulletin has a maximum severity of Moderate:
· MS07-038: This security update resolves a vulnerability that could allow an attacker could to gather system-specific information about the affected host.**
Finally another reminder about our monthly Security Bulletin webcast with me and Mike Reavey . That will be tomorrow, Wednesday July 11, 2007 at 11 AM Pacific Time. We’ll be reviewing the bulletins and answering your questions on the air with help from our subject matter experts. If you can’t make the live webcast, remember you can listen to it on-demand after it’s done. You can register for the live or on-demand webcast here:
Thanks.
Christopher
*This posting is provided “AS IS” with no warranties, and confers no rights.*