MSRC

Monthly Security Bulletin Webcast Q&A - June 2009

Friday, June 12, 2009

Hosts: Adrian Stone, Senior Security Program Manager Lead Jerry Bryant, Senior Security Program Manager Lead Website: TechNet/security Chat Topic: June 2009 Security Bulletin Date: Wednesday, June 10, 2009 Q: For security update for Microsoft Excel 2000 ( KB969683), is Microsoft Office Excel 2000 Service Pack 3 the only version that is vulnerable, or is that the only version of Office that is supported and therefore the only one that the security update will work for?

• Pages
• Security Update Webcast Q & A

Security Bulletin Webcast Video, Questions and Answers – June 2009

Friday, June 12, 2009

During the security bulletin webcast for June 2009, we answered a wide array of questions around the 10 bulletins we released. Of primary interest to customers, based on the number of questions we received on the topic, is the RPC issue addressed by MS09-026. As this issue affects third party products that utilize RPC in Windows, customers wanted to know if there is a way to tell if their third party product was vulnerable.

• Exploitability Index
• Microsoft Office
• Security Bulletin
• Security Update
• Security Update Webcast
• Security Update Webcast Q & A
• Video

June 2009 Bulletin Release

Tuesday, June 09, 2009

Summary of Microsoft’s monthly security bulletin release for June 2009. Today we released 10 new security bulletins. 6 of those affect Windows with two rated as critical, three rated as important and one as moderate. The remaining four all have an aggregate rating of critical and affect Internet Explorer, Microsoft Office Word, Microsoft Office Excel and Microsoft Works Converters.

• ActiveX
• Exploitability Index
• Security Advisory
• Security Bulletin
• Security Update
• Video

June 2009 Advance Notification

Thursday, June 04, 2009

Advance Notification for the June 2009 Security Bulletin Release Today, we published our Advance Notification indicating that next Tuesday, June 9 at 10:00 a.m. PDT (UTC -8), we will be releasing a total of 10 security bulletins consisting of: · Six updates affecting Windows. Two Critical, three Important, and one Moderate.

Microsoft Security Advisory 971778 Vulnerability in Microsoft DirectShow Released

Thursday, May 28, 2009

We’ve just released Microsoft Security Advisory 971778 today. This discusses a new vulnerability in Microsoft DirectShow affecting Windows 2000, Windows XP and Windows Server 2003 that is under limited attack. The advisory outlines information about the vulnerability and steps customers can take to protect themselves while we’re working on a security update to address the issue.

Microsoft Security Advisory 971492

Monday, May 18, 2009

I wanted to let you know that we have just posted Microsoft Security Advisory (971492). This advisory contains information regarding public reports of a vulnerability in Microsoft Internet Information Services (IIS) that could allow Elevation of Privilege. Products affected are IIS 5.0, IIS 5.1, and IIS 6.0. The advisory contains guidance and workarounds that customers can use to help protect themselves.

Monthly Security Bulletin Webcast Q&A - May 2009

Friday, May 15, 2009

Hosts: Adrian Stone, Senior Security Program Manager Lead Jerry Bryant, Senior Security Program Manager Website: TechNet/security Chat Topic: May 2009 Security Bulletin Date: Wednesday, May 13, 2009 Q: Has there been any reports of KB958690causing blue screens? We have heard some info on the web and were curious if you have heard anything.

• Pages
• Security Update Webcast Q & A

Security Bulletin Webcast Video, Questions and Answers – May 2009

Friday, May 15, 2009

In the May 2009 security bulletin webcast, we addressed several questions relating to MS09-017 in addition to questions about WSUS and MBSA. For those questions that came in after we concluded the webcast, we have provided answers in the published Q&A which you can find here: http://blogs.technet.com/msrc/pages/monthly-security-bulletin-webcast-q-a-May-2009.aspx Also, here is the link to the Q&A index page in case you want to view previous months:

• Security Bulletin
• Security Update
• Security Update Webcast
• Security Update Webcast Q & A
• Video

May 2009 Bulletin Release

Tuesday, May 12, 2009

Summary of Microsoft’s monthly security bulletin release for May 2009. Today we released one security bulletin, MS09-017, affecting our PowerPoint products. This update addresses several vulnerabilities including the issue described in Microsoft Security Advisory 969136. In that advisory, we noted that we were aware of limited, targeted attacks. The security of our customers is important to us and due to these active attacks, we have released the updates for one product line (all versions of Microsoft Office for Windows) so that the majority of our customers can protect their systems.

• Security Bulletin
• Security Update
• Security Update Webcast
• Security Update Webcast Q & A
• Video

May 2009 Advance Notification

Thursday, May 07, 2009

Summary of the May 2009 Advance Notification for the 5/12/2009 security bulletin release. Today we are letting customers know that next week we will be releasing one security bulletin affecting Microsoft Office PowerPoint with an aggregate severity rating of critical. Customers should review the Advance Notification and prepare appropriately for deployment.