Skip to main content
MSRC

2008

Additional Microsoft Security Bulletin Webcasts and Information Available for MS08-067

Thursday, October 23, 2008

Hi All, Mike Reavey, here. Just wanted to let you know that based on customer feedback, we have set up two additional Security Bulletin Webcasts related to this out-of-band release. Details are below: · For the Thursday, 10/23/08, 5:00 PM Webcast, customers can register at: http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032394183&Culture=en-US · For the Friday, 10/24/08, 11:00 AM Webcast, customers can register at: http://msevents.

Read More

More detail about MS08-067, the out-of-band netapi32.dll security update

Thursday, October 23, 2008

Today Microsoft released a security update that fixes a remote code execution vulnerability in the Windows Server Service. This is a serious vulnerability and we have seen targeted attacks using this vulnerability to compromise fully-patched Windows XP and Windows Server 2003 computers so we have released the fix “out of band” (not on the regular Patch Tuesday).

Read More

MS08-067 Released

Thursday, October 23, 2008

Hi, This is Christopher Budd. Following up on my post from last night, I wanted to let you know that we’ve released MS08-067 today. This security update resolves a vulnerability in the Server service that affects all currently supported versions of Windows. Windows XP and older versions are rated as “Critical” while Windows Vista and newer versions are rated as “Important”.

Read More

MS08-067: Example of Need for Increased Collaboration

Thursday, October 23, 2008

Handle: Cap’n Steve IRL: Steve Adegbite Rank: Senior Security Program Manager Lead Likes: Reverse Engineering an obscene amount of code and ripping it up on a snowboard Dislikes: Not much but if you hear me growl…run You’ve probably heard that we released an out-of-band Security Bulletin for a vulnerability in Windows (MS08-067).

Read More

Advance Notification for Out-of-Band Release

Wednesday, October 22, 2008

Hello this is Christopher Budd, I wanted to let you know that we’ve just posted an Advance Notification for an out-of-band bulletin release. We plan to release one Windows security bulletin with a maximum severity of Critical; scheduled for a target time of 10:00 a.m. PT on Thursday Oct. 23, 2008.

Read More

Monthly Security Bulletin Webcast Q&A – October, 2008

Friday, October 17, 2008

Register now for the Novemberr 2008 Security Bulletin Webcast Security Bulletin Webcast Q&A Index Hosts: Christopher Budd, Security Response Communications Lead Adrian Stone, Lead Security Program Manager (MSRC) Website: TechNet/security Chat Topic: October 2008 Security Bulletin Date: Wednesday, October 15, 2008 Q: What is the difference between Microsoft Update and Windows Update as patch mechanisms?

Read More

Security Bulletin Webcast Questions and Answers - October 2008

Friday, October 17, 2008

Hi, During this month’s webcast we were able to address 18 questions in the time allotted. The questions were spread fairly evenly across all bulletins, as well as the Exploitability Index that was released for the first time with this Bulletin Release Cycle. Here is the link to the full Q&A so you can see all of the answers that were provided for these great questions:

Read More