Microsoft Security Response Center

Microsoft Security Bulletin Webcast Q&A - July 2008

Wednesday, July 30, 2008

Hosts: Mike Reavey, Group Security Program Manager Adrian Stone, Microsoft Security Response Center (MSRC) Website: TechNet/security Topic: Information about Microsoft Security Bulletins Date: Wednesday, July 9, 2008 Q: Why was CVE-2008-0951(Windows Vista not properly enforce the NoDriveTypeAutoRun registry value) not listed as a fixed vulnerability in the bulletin for MS08-038? The notice was embedded within the Bulletin FAQ and has been overlooked by many people.

Microsoft Security Bulletin Webcast Q&A - June 2008

Wednesday, July 30, 2008

Hosts: Christopher Budd, Microsoft Security Response Communications Lead Adrian Stone, Microsoft Security Response Center (MSRC) Website: TechNet/security Topic: Information about Microsoft Security Bulletins Date: Wednesday, June 11, 2008 Q: Was XP SP3 released via AU yesterday? Also where did Microsoft announce this ahead of time? A: No, XP SP3 was not release via AU yesterday.

Security Bulletin Webcast Questions & Answers

Wednesday, July 30, 2008

Hey everyone, This is Jerry Bryant. I am the Business, Operations & Communications Manager on the Security Response Communications team. I am writing to let you know about a new process we are implementing regarding the questions and answers from our monthly security bulletin webcast. Attendee’s to the webcast ask a lot of great questions concerning the security updates we just released and we have many subject matter experts (SME’s) on hand to answer them.

Security Update Webcast Q & A

Increased Threat for DNS Spoofing Vulnerability

Friday, July 25, 2008

Hi. Bill here. Today we released Microsoft Security Advisory (956187) to warn you of public exploit code available for Microsoft Security Bulletin MS08-037 (Vulnerabilities in DNS Could Allow Spoofing (953230). We have investigated the public exploit code and have determined that customers who have installed Microsoft Security Bulletin MS08-037 are not affected.

How to parse the .doc file format

Friday, July 18, 2008

This past February, Microsoft publicly released the Office binary file formats specification. These describe how to parse Word, Excel, and PowerPoint files to review or extract the content. Because they describe the structure of these file formats in detail, we think the file format specification will be particularly interesting to ISVs who write detection logic for malware scanners (such as Anti-Virus software).

Title: A Buddhist Monk Goes Up to a Hot Dog Vendor…

Friday, July 18, 2008

…and says “Make me one with everything.” Aside from that fact that most hot dog vendors don’t carry Tofu Pups, we’re taking this joke seriously for the next iteration of BlueHat, and giving you some attack content as well as talking about proactive defense. Coming this October, the BlueHat team will partner with the SDL team to create two full days of content, the first day focusing on new attacks and the emerging threat horizon, and the second day focusing on steps we can take as software architects, developers, testers, and maintainers to make code more secure in the first place.

Revision for MS08-037

Thursday, July 10, 2008

Hello, This is Christopher Budd. I wanted to take a moment and let you know about a revision that we’ve made to MS08-037 today. After the release of MS08-037, we became aware of reports of ZoneAlarm customers experiencing issues after applying the security updates. We started investigating these reports as soon as we heard about them and have been working to research this issue.

Update 2: Microsoft Security Advisory (954960)

Thursday, July 10, 2008

Hi. Bill here. I want to let you know that customers running Windows Server Update Services 3.0 Service Pack 1 on Windows Server 2008 may experience an issue installing the update provided in Microsoft Knowledge Base Article 954960. The update does not correctly elevate privileges, which are required for the installation to complete.

Update: Microsoft Security Advisory 954960

Wednesday, July 09, 2008

Hi. Bill here. I want to let you know that we updated Microsoft Security Advisory 954960, which contains information regarding deployment issues with Microsoft Windows Server Update Services (WSUS) version 3.0 and 3.0 Service Pack 1. Under specific conditions, the issue does not let clients detect any updates from a WSUS server on systems with Microsoft Office 2003 installed.

MS08-037 : More entropy for the DNS resolver

Tuesday, July 08, 2008

We released security bulletin MS08-020 two months ago to improve the DNS transaction ID entropy. You can read more about the MS08-020 algorithm change in this blog entry. Increasing the entropy makes it more difficult for attackers to spoof DNS replies. Today, we released MS08-037 to further increase the difficulty of spoofing DNS transactions.

Microsoft Security Response Center Blog