Microsoft Security Updates planned for April 2007

Zazula · 04-08-2007, 04:02 PM

On 10 April 2007 Microsoft is planning to release:

Security Updates
. Four Microsoft Security Bulletins affecting Microsoft Windows. The highest Maximum Severity rating for these is Critical. These updates will be detectable using the Microsoft Baseline Security Analyzer. These updates will require a restart.
. One Microsoft Security Bulletin affecting Microsoft Content Management Server. The highest Maximum Severity rating for these is Critical. These updates will be detectable using the Microsoft Baseline Security Analyzer. These updates may require a restart.

Microsoft Windows Malicious Software Removal Tool
. Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center. Note that this tool will NOT be distributed using Software Update Services (SUS).

Non-security High Priority updates on MU, WU, WSUS and SUS
. Microsoft will release 2 NON-SECURITY High-Priority Updates for Windows on Windows Update (WU) and Software Update Services (SUS).
. Microsoft will release 4 NON-SECURITY High-Priority Updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

The number of bulletins, products affected, restart information and severities are subject to change until released.

Microsoft will host a webcast next week to address customer questions on these bulletins. For more information on this webcast please see below:
. TechNet Webcast: Information about Microsoft's Security Bulletins
. Wednesday, April 11, 2007 11:00 AM Pacific Time (US & Canada)
. http://msevents.microsoft.com/CUI/We...CountryCode=US

At this time no additional information on these bulletins such as details regarding severity or details regarding the vulnerability will be made available until 10 April 2007.

Zazula · 04-10-2007, 03:52 PM

********************************************************************
Title: Microsoft Security Bulletin Summary for April 2007
Issued: April 10, 2007
Version Number: 2.0
Bulletin Summary: http://go.microsoft.com/fwlink/?LinkId=87050
********************************************************************

Summary:
========
This Bulletin Summary contains information about all security updates released this month. Their security bulletins, in order of severity, are as follows:

Critical Security Bulletins
===========================

MS07-017 - Vulnerabilities in GDI Could Allow Remote Code Execution (925902)
Affected Software:
- Windows 2000 Service Pack 4
- Windows XP Service Pack 2
- Windows XP Professional x64 Edition
- Windows XP Professional x64 Edition Service Pack 2
- Windows Server 2003
- Windows Server 2003 Service Pack 1
- Windows Server 2003 Service Pack 2
- Windows Server 2003 for Itanium-based Systems
- Windows Server 2003 with SP1 for Itanium-based Systems
- Windows Server 2003 with SP2 for Itanium-based Systems
- Windows Server 2003 x64 Edition
- Windows Server 2003 x64 Edition Service Pack 2
- Windows Vista
- Windows Vista x64 Edition
Impact: Remote Code Execution
Version Number: 1.0

MS07-018 - Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939)
Affected Software:
- Content Management Server 2001 Service Pack 1
- Content Management Server 2002 Service Pack 2
Impact: Remote Code Execution
Version Number: 1.0

MS07-019 - Vulnerability in Universal Plug and Play Could Allow Remote Code Execution (931261)
Affected Software:
- Windows XP Service Pack 2
- Windows XP Professional x64 Edition
- Windows XP Professional x64 Edition Service Pack 2
Impact: Remote Code Execution
Version Number: 1.0

MS07-020 - Vulnerability in Microsoft Agent Could Allow Remote Code Execution (932168)
Affected Software:
- Windows 2000 Service Pack 4
- Windows XP Service Pack 2
- Windows XP Professional x64 Edition
- Windows XP Professional x64 Edition Service Pack 2
- Windows Server 2003
- Windows Server 2003 Service Pack 1
- Windows Server 2003 Service Pack 2
- Windows Server 2003 for Itanium-based Systems
- Windows Server 2003 with SP1 for Itanium-based Systems
- Windows Server 2003 with SP2 for Itanium-based Systems
- Windows Server 2003 x64 Edition
- Windows Server 2003 x64 Edition Service Pack 2
Impact: Remote Code Execution
Version Number: 1.0

MS07-021 - Vulnerabilities in CSRSS Could Allow Remote Code Execution (930178)
Affected Software:
- Windows 2000 Service Pack 4
- Windows XP Service Pack 2
- Windows XP Professional x64 Edition
- Windows XP Professional x64 Edition Service Pack 2
- Windows Server 2003
- Windows Server 2003 Service Pack 1
- Windows Server 2003 Service Pack 2
- Windows Server 2003 for Itanium-based Systems
- Windows Server 2003 with SP1 for Itanium-based Systems
- Windows Server 2003 with SP2 for Itanium-based Systems
- Windows Server 2003 x64 Edition
- Windows Server 2003 x64 Edition Service Pack 2
- Windows Vista
- Windows Vista x64 Edition
Impact: Remote Code Execution
Version Number: 1.0

Important Security Bulletins
============================

MS07-022 - Vulnerability in Windows Kernel Could Allow Elevation of Privilege (931784)
Affected Software:
- Windows 2000 Service Pack 4
- Windows XP Service Pack 2
- Windows Server 2003
- Windows Server 2003 Service Pack 1
- Windows Server 2003 Service Pack 2
Impact: Elevation of Privilege
Version Number: 1.0

Update Availability:
===================
Updates are available to address these issues. For additional information, including Technical Details, Workarounds, answers to Frequently Asked Questions, and Update Deployment Information please read the Microsoft Security Bulletin Summary for this month at: http://go.microsoft.com/fwlink/?LinkId=87050

Support:
========
Technical support is available from Microsoft Product Support Services at 1-866-PC SAFETY (1-866-727-2338). There is no charge for support calls associated with security updates. International customers can get support from their local Microsoft subsidiaries. Phone numbers for international support can be found at: http://support.microsoft.com/common/international.aspx

Zazula · 04-10-2007, 11:26 PM

********************************************************************
Title: Microsoft Security Bulletin Minor Revisions
Issued: April 10, 2007
********************************************************************

Summary
=======
The following bulletins have undergone a minor revision increment.
Please see the appropriate bulletin for more details.

* MS07-020
* MS05-026

Bulletin Information:
=====================

* MS07-020

- http://www.microsoft.com/technet/sec.../ms07-020.mspx
- Reason for Revision: Bulletin Revised: Updated the File
Information table for Windows Server 2003 platforms to
include all updated files and correct file versions.
- Originally posted: April 10, 2007
- Updated: April 10, 2007
- Bulletin Severity Rating: Critical
- Version: 1.1

* MS05-026

- http://www.microsoft.com/technet/sec.../ms05-026.mspx
- Reason for Revision: Bulletin supersedence table in the FAQ
section revised to include MS02-055.
- Originally posted: June 14, 2005
- Updated: April 10, 2007
- Bulletin Severity Rating: Critical
- Version: 1.2

********************************************************************

Support:
========
Technical support resources can be found at:
http://go.microsoft.com/fwlink/?LinkId=21131

International customers can get support from their local Microsoft
subsidiaries. Phone numbers for international support can be found
at: http://support.microsoft.com/common/international.aspx

04-08-2007, 04:02 PM	#1 (permalink)
Zazula Manager Emeritus, I'm blond, James Blond Join Date: Apr 2006 Location: Athens, Greece Posts: 7,667 OS: Win XP Pro SP2	Microsoft Security Updates planned for April 2007 On 10 April 2007 Microsoft is planning to release: Security Updates . Four Microsoft Security Bulletins affecting Microsoft Windows. The highest Maximum Severity rating for these is Critical. These updates will be detectable using the Microsoft Baseline Security Analyzer. These updates will require a restart. . One Microsoft Security Bulletin affecting Microsoft Content Management Server. The highest Maximum Severity rating for these is Critical. These updates will be detectable using the Microsoft Baseline Security Analyzer. These updates may require a restart. Microsoft Windows Malicious Software Removal Tool . Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center. Note that this tool will NOT be distributed using Software Update Services (SUS). Non-security High Priority updates on MU, WU, WSUS and SUS . Microsoft will release 2 NON-SECURITY High-Priority Updates for Windows on Windows Update (WU) and Software Update Services (SUS). . Microsoft will release 4 NON-SECURITY High-Priority Updates on Microsoft Update (MU) and Windows Server Update Services (WSUS). The number of bulletins, products affected, restart information and severities are subject to change until released. Microsoft will host a webcast next week to address customer questions on these bulletins. For more information on this webcast please see below: . TechNet Webcast: Information about Microsoft's Security Bulletins . Wednesday, April 11, 2007 11:00 AM Pacific Time (US & Canada) . http://msevents.microsoft.com/CUI/We...CountryCode=US At this time no additional information on these bulletins such as details regarding severity or details regarding the vulnerability will be made available until 10 April 2007. __________________ "Time is the wisest because it discovers everything" Thales of Miletus (ca.624BC-ca.546BC) "Everything flows, nothing stands still." Heraclitus of Ephesus (ca.535BC-475BC) "One thing I know, that I know nothing" Socrates of Athens (ca.470BC–399BC)

04-10-2007, 03:52 PM	#2 (permalink)
Zazula Manager Emeritus, I'm blond, James Blond Join Date: Apr 2006 Location: Athens, Greece Posts: 7,667 OS: Win XP Pro SP2	Re: Microsoft Security Updates planned for April 2007 ****************************************************************** Title: Microsoft Security Bulletin Summary for April 2007 Issued: April 10, 2007 Version Number: 2.0 Bulletin Summary: http://go.microsoft.com/fwlink/?LinkId=87050 **************************************************************** Summary: ======== This Bulletin Summary contains information about all security updates released this month. Their security bulletins, in order of severity, are as follows: Critical Security Bulletins =========================== MS07-017 - Vulnerabilities in GDI Could Allow Remote Code Execution (925902) Affected Software: - Windows 2000 Service Pack 4 - Windows XP Service Pack 2 - Windows XP Professional x64 Edition - Windows XP Professional x64 Edition Service Pack 2 - Windows Server 2003 - Windows Server 2003 Service Pack 1 - Windows Server 2003 Service Pack 2 - Windows Server 2003 for Itanium-based Systems - Windows Server 2003 with SP1 for Itanium-based Systems - Windows Server 2003 with SP2 for Itanium-based Systems - Windows Server 2003 x64 Edition - Windows Server 2003 x64 Edition Service Pack 2 - Windows Vista - Windows Vista x64 Edition Impact: Remote Code Execution Version Number: 1.0 MS07-018 - Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939) Affected Software: - Content Management Server 2001 Service Pack 1 - Content Management Server 2002 Service Pack 2 Impact: Remote Code Execution Version Number: 1.0 MS07-019 - Vulnerability in Universal Plug and Play Could Allow Remote Code Execution (931261) Affected Software: - Windows XP Service Pack 2 - Windows XP Professional x64 Edition - Windows XP Professional x64 Edition Service Pack 2 Impact: Remote Code Execution Version Number: 1.0 MS07-020 - Vulnerability in Microsoft Agent Could Allow Remote Code Execution (932168) Affected Software: - Windows 2000 Service Pack 4 - Windows XP Service Pack 2 - Windows XP Professional x64 Edition - Windows XP Professional x64 Edition Service Pack 2 - Windows Server 2003 - Windows Server 2003 Service Pack 1 - Windows Server 2003 Service Pack 2 - Windows Server 2003 for Itanium-based Systems - Windows Server 2003 with SP1 for Itanium-based Systems - Windows Server 2003 with SP2 for Itanium-based Systems - Windows Server 2003 x64 Edition - Windows Server 2003 x64 Edition Service Pack 2 Impact: Remote Code Execution Version Number: 1.0 MS07-021 - Vulnerabilities in CSRSS Could Allow Remote Code Execution (930178) Affected Software: - Windows 2000 Service Pack 4 - Windows XP Service Pack 2 - Windows XP Professional x64 Edition - Windows XP Professional x64 Edition Service Pack 2 - Windows Server 2003 - Windows Server 2003 Service Pack 1 - Windows Server 2003 Service Pack 2 - Windows Server 2003 for Itanium-based Systems - Windows Server 2003 with SP1 for Itanium-based Systems - Windows Server 2003 with SP2 for Itanium-based Systems - Windows Server 2003 x64 Edition - Windows Server 2003 x64 Edition Service Pack 2 - Windows Vista - Windows Vista x64 Edition Impact: Remote Code Execution Version Number: 1.0 Important Security Bulletins ============================ MS07-022 - Vulnerability in Windows Kernel Could Allow Elevation of Privilege (931784)** Affected Software: - Windows 2000 Service Pack 4 - Windows XP Service Pack 2 - Windows Server 2003 - Windows Server 2003 Service Pack 1 - Windows Server 2003 Service Pack 2 Impact: Elevation of Privilege Version Number: 1.0 Update Availability: =================== Updates are available to address these issues. For additional information, including Technical Details, Workarounds, answers to Frequently Asked Questions, and Update Deployment Information please read the Microsoft Security Bulletin Summary for this month at: http://go.microsoft.com/fwlink/?LinkId=87050 Support: ======== Technical support is available from Microsoft Product Support Services at 1-866-PC SAFETY (1-866-727-2338). There is no charge for support calls associated with security updates. International customers can get support from their local Microsoft subsidiaries. Phone numbers for international support can be found at: http://support.microsoft.com/common/international.aspx __________________ "Time is the wisest because it discovers everything" Thales of Miletus (ca.624BC-ca.546BC) "Everything flows, nothing stands still." Heraclitus of Ephesus (ca.535BC-475BC) "One thing I know, that I know nothing" Socrates of Athens (ca.470BC–399BC)

04-10-2007, 11:26 PM	#3 (permalink)
Zazula Manager Emeritus, I'm blond, James Blond Join Date: Apr 2006 Location: Athens, Greece Posts: 7,667 OS: Win XP Pro SP2	Re: Microsoft Security Updates planned for April 2007 ****************************************************************** Title: Microsoft Security Bulletin Minor Revisions Issued: April 10, 2007 ****************************************************************** Summary ======= The following bulletins have undergone a minor revision increment. Please see the appropriate bulletin for more details. * MS07-020 * MS05-026 Bulletin Information: ===================== * MS07-020 - http://www.microsoft.com/technet/sec.../ms07-020.mspx - Reason for Revision: Bulletin Revised: Updated the File Information table for Windows Server 2003 platforms to include all updated files and correct file versions. - Originally posted: April 10, 2007 - Updated: April 10, 2007 - Bulletin Severity Rating: Critical - Version: 1.1 * MS05-026 - http://www.microsoft.com/technet/sec.../ms05-026.mspx - Reason for Revision: Bulletin supersedence table in the FAQ section revised to include MS02-055. - Originally posted: June 14, 2005 - Updated: April 10, 2007 - Bulletin Severity Rating: Critical - Version: 1.2 ******************************************************************** Support: ======== Technical support resources can be found at: http://go.microsoft.com/fwlink/?LinkId=21131 International customers can get support from their local Microsoft subsidiaries. Phone numbers for international support can be found at: http://support.microsoft.com/common/international.aspx __________________ "Time is the wisest because it discovers everything" Thales of Miletus (ca.624BC-ca.546BC) "Everything flows, nothing stands still." Heraclitus of Ephesus (ca.535BC-475BC) "One thing I know, that I know nothing" Socrates of Athens (ca.470BC–399BC)