Month Archives: September 2010

Microsoft Releases MS10-070 to all distribution channels

Thursday, September 30, 2010

Hi everyone - Today we released out-of-band Security Update MS10-070through the remainder of our standard distribution channels, including Windows Update and Windows Server Update Services. We have completed our testing of these channels and confirmed the update can be successfully downloaded. Customers are strongly encouraged to download the Security Update, test it in their environments and deploy it as quickly as possible.

• Security Update

Q&A from the September 2010 Out-of-Band Security Release webcast

Thursday, September 30, 2010

Hello, Below you will find the webcast we conducted earlier this week as part of the MS10-070 Security Update which was released Out-of-Band. We have also published the questions and answers from that webcast and linked them here. The response for this webcast was amazing; however, due to time constraints, we were unable to answer all of the questions that were asked during the live webcast.

• OOB
• Security Advisory
• Security Bulletin
• Security Update
• Security Update Webcast
• Video

MS10-070 定例外のセキュリティ情報 FAQ

Wednesday, September 29, 2010

-———————————————————- 2010/10/1 更新 このセキュリティ更新プログラムを Microsoft Update / Windows Update からも提供開始しました。自動更新を有効にしているお

2010年9月29日 ASP.NET の脆弱性を修正 (定例外)

Tuesday, September 28, 2010

事前通知でお伝えした通り、セキュリティ情報計 1 件 (重要 1 件) を公開しました。 MS10-070 のセキュリティ更新プロ

2010年9月のワンポイントセキュリティ [特別編]

Tuesday, September 28, 2010

2010 年 9 月 29 日に定例外で公開した MS10-070: ASP.NET のセキュリティ情報に関する特別編のワンポイントセキュリティ情報を公

MS10-070 Released Out-of-Band Today

Tuesday, September 28, 2010

Hello, As we announced yesterday, today we released Security Bulletin MS10-070 out-of-band to address a vulnerability in ASP.NET. The bulletin and the blog by Scott Guthrie, corporate vice president of Microsoft’s .NET Developer Platform are available for more information. This security update addresses a vulnerability affecting all versions of the .

• Security Update
• Security Update Webcast

ASP.NET のセキュリティ更新の事前通知 (定例外)

Monday, September 27, 2010

先日公開した「セキュリティ アドバイザリ 2416728」で、ASP.NET の脆弱性に関する新たな報告を

• セキュリティ情報

Out of Band Release to Address Microsoft Security Advisory 2416728

Sunday, September 26, 2010

Hello - Today we provided advance notification to customers that we will release an out-of-band security update to address the vulnerability discussed in Security Advisory 2416728. The update is scheduled for release tomorrow, Tuesday, September 28, 2010 at approximately 10:00 AM PDT. The bulletin has a severity rating of Important and addresses a publicly disclosed vulnerability in ASP.

• Security Update
• Security Update Webcast

Security Advisory 2416728 - Workaround Update

Friday, September 24, 2010

Hi everyone - We’ve updated Microsoft Security Advisory2416728 to include a step in the workaround requiring the blocking of requests that specify the application error path on the querystring. This can be done using URLScan, a free tool for Internet Information Services (IIS) that can selectively block requests based on rules defined by the administrator.

• Advisory
• Workarounds

Additional Information about the ASP.NET Vulnerability

Monday, September 20, 2010

Over the past couple of days we’ve received some additional questions regarding the ASP.NET vulnerability. In this post we will answer some of the most common ones. Is My ASP.NET Site Affected By This Issue? Yes, all sites that use ASP.NET are affected by this vulnerability. You should follow the recommendations outlined in the advisory.