MSRC

Internet Explorer Cumulative Update Releasing Out-of-Band

Monday, March 29, 2010

Today we issued our Advanced Notification Service (ANS) to advise customers that we will be releasing security update MS10-018 tomorrow, March 30, 2010, at approximately10:00 a.m. PDT (UTC-8). MS10-018 resolves Security Advisory 981374, addressing a publicly disclosed vulnerability in Internet Explorer 6 and Internet Explorer 7. Internet Explorer 8 is unaffected by the vulnerability addressed in the advisory and we continue to encourage all customers to upgrade to this version to benefit from the improved security protection it offers.

• Attack
• Internet Explorer (IE)
• Security Advisory
• Security Bulletin
• Security Update
• Zero-Day Exploit

March 2010 Security Bulletin Webcast

Monday, March 15, 2010

Hello, Today we published the Questions & Answers from the March 2010 Security Bulleting webcast. We answered a total of 13 questions concerning the March bulletins and open Security Advisories. No particular themes emerged from the questions but there were some good ones so please review them. The video covers the core part of the presentation Adrian Stone and I gave during the webcast.

• Security Bulletin
• Security Update
• Security Update Webcast
• Security Update Webcast Q & A
• Video
• Webcast Q&A

Monthly Security Bulletin Webcast Q&A - March 2010

Friday, March 12, 2010

Hosts: Adrian Stone, Senior Security Program Manager Lead Jerry Bryant, Senior Security Communications Manager Lead Website: TechNet/security Chat Topic: March 2010 Security Bulletin Release Date: Wednesday, March 10, 2010 Q: I use Macintosh computers with Microsoft Office 2008, should I be concerned about its usage following the release of MS10-017 ?

• Pages
• Webcast Q&A

Update on Security Advisory 981374

Friday, March 12, 2010

Hi everyone, I’m writing to let you know that we have updated Security Advisory 981374 with new workaround information. We are aware that exploit code has been made public for this issue. As with our last update, Internet Explorer 8 remains unaffected by the vulnerability addressed in the advisory and we continue to encourage all customers to upgrade to this version.

• Attack
• Emerging Threat
• Internet Explorer (IE)
• Mitigations
• Security Advisory
• Workarounds
• Zero-Day Exploit

March 2010 Security Bulletin Release

Tuesday, March 09, 2010

Today we are releasing two Important security bulletins addressing eight vulnerabilities in Windows and Microsoft Office. Both bulletins have an aggregate Exploitability Index rating of “1” so we recommend that customers deploy these updates as soon as possible. The Microsoft Exploitability Index provides additional information to help customers prioritize deployment of monthly security bulletins.

Security Advisory 981374 Released

Tuesday, March 09, 2010

Hi everyone, Today we released Security Advisory 981374 addressing a publicly disclosed vulnerability in Internet Explorer 6 and Internet Explorer 7. Internet Explorer 8 is not affected by this issue. Customers using Internet Explorer 6 or 7 should upgrade to Internet Explorer 8 immediately to benefit from the improved security features and defense in depth protections.

• Attack
• Attack Vector
• Emerging Threat
• Internet Explorer (IE)
• Security Advisory

March 2010 Bulletin Release Advance Notification

Thursday, March 04, 2010

Today we are providing advance notification to customers that we will be releasing two bulletins this month affecting Windows and Microsoft Office products. Both bulletins are rated Important and address a total of 8 vulnerabilities. We recommend that customers review the Advance Notification webpage and prepare to deploy these bulletins as soon as possible.

Update: MS10-015 security update re-released with new detection logic

Tuesday, March 02, 2010

Hi, I am writing to let you know that we have revised the installation packages for MS10-015 with new logic that prevents the security update from being installed on systems if certain abnormal conditions exist. Such conditions could be the result of an infection with a computer virus such as the Alureon rootkit.

• Malicious Software (Malware)
• Microsoft Windows
• Security Bulletin
• Security Update
• Virus

Security Advisory 981169 Released

Monday, March 01, 2010

Hello again, Today we released Security Advisory 981169 to address the VBScript issue involving Windows Help files that we blogged about yesterday. To reiterate what we said in that post, we are not aware of any active attacks at this time and the following operating systems are not affected by this issue: Windows 7, Windows Server 2008 R2, Windows Server 2008, and Windows Vista.

• Attack
• Attack Vector
• Emerging Threat
• Microsoft Windows
• Mitigations
• Security Advisory
• Workarounds

Investigating a new win32hlp and Internet Explorer issue

Sunday, February 28, 2010

Hi everyone, On Friday 2/26/2010, an issue was posted publicly that could allow an attacker to host a maliciously crafted web page and run arbitrary code if they could convince a user to visit the web page and then get them to press the F1 key in response to a pop up dialog box.

• Attack Vector
• Emerging Threat
• Internet Explorer (IE)
• Microsoft Windows
• Security Advisory
• Zero-Day Exploit