|
Microsoft Advisories
|
Wednesday, 29 April 2009
Severity Rating: Critical - Revision Note: V1.1 (April 29, 2009): Added entry to the section, Frequently Asked Questions (FAQ) Related to This Security Update, to communicate that the Known issues with this security update section in the associated Microsoft Knowledge Base Article 960803 has been updated. This is an informational change only.Summary: This security update resolves one publicly disclosed vulnerability and two privately reported vulnerabilities in Microsoft Windows HTTP Services (WinHTTP). The most severe vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. |
|
Read more...
|
|
|
Microsoft Advisories
|
Wednesday, 29 April 2009
Severity Rating: Critical - Revision Note: V2.0 (April 29, 2009): Added Microsoft XML Core Services 4.0 (KB954430) on 32-bit and x64-based editions of Windows Vista Service Pack 2 and on 32-bit, x64-based, and Itanium-based editions of Windows Server 2008 Service Pack 2 as affected software. Also added as non-affected software: Microsoft XML Core Services 3.0 and Microsoft XML Core Services 6.0 on 32-bit and x64-based editions of Windows Vista Service Pack 2 and on 32-bit, x64-based, and Itanium-based editions of Windows Server 2008 Service Pack 2. This is a detection change only; there were no changes to the binaries. Customers who have already successfully installed KB954430 do not need to reinstall.Summary: This security update resolves several vulnerabilities in Microsoft XML Core Services. The most severe vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. |
|
Read more...
|
|
|
Microsoft Advisories
|
Wednesday, 29 April 2009
Revision Note: V2.0 (April 29, 2009): Added Microsoft XML Core Services 4.0 (KB954430) on 32-bit and x64-based editions of Windows Vista Service Pack 2 and on 32-bit, x64-based, and Itanium-based editions of Windows Server 2008 Service Pack 2 as affected software for MS08-069. This is a detection change only; there were no changes to the binaries. Customers who have already successfully installed KB954430 do not need to reinstall.Summary: This bulletin summary lists security bulletins released for November 2008. |
|
Read more...
|
|
|
Microsoft Advisories
|
Wednesday, 29 April 2009
Revision Note: V6.0 (April 29, 2009): Added Windows Media Services 2008 (KB952068) on 32-bit and x64-based editions of Windows Server 2008 Service Pack 2 as affected software for MS08-076. This is a detection change only; there were no changes to the binaries. Customers who have already successfully installed KB952068 do not need to reinstall.Summary: This bulletin summary lists security bulletins released for December 2008. |
|
Read more...
|
|
|
Microsoft Advisories
|
Wednesday, 29 April 2009
Severity Rating: Important - Revision Note: V2.0 (April 29, 2009): Added an entry to the section, Frequently Asked Questions (FAQ) Related to This Security Update to communicate the rerelease of the Norwegian-language update for Microsoft Windows 2000 Service Pack 4 (KB952004). Customers who require the Norwegian-language update need to download and install the rereleased update. No other updates or locales are affected by this rerelease.Summary: This security update resolves four publicly disclosed vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if an attacker is allowed to log on to the system and then run a specially crafted application. The attacker must be able to run code on the local machine in order to exploit this vulnerability. An attacker who successfully exploited any of these vulnerabilities could take complete control over the affected system. |
|
Read more...
|
|
|
Microsoft Advisories
|
Wednesday, 29 April 2009
Severity Rating: Important - Revision Note: V4.0 (April 29, 2009): Added Windows Media Services 2008 (KB952068) on 32-bit and x64-based editions of Windows Server 2008 Service Pack 2 as affected software. Also, added Windows Server 2008 for Itanium-based Systems Service Pack 2 as non-affected software. This is a detection change only; there were no changes to the binaries. Customers who have already successfully installed KB952068 do not need to reinstall.Summary: This security update resolves two privately reported vulnerabilities in the following Windows Media components: Windows Media Player, Windows Media Format Runtime, and Windows Media Services. The most severe vulnerability could allow remote code execution. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. |
|
Read more...
|
|
|
Microsoft Advisories
|
Wednesday, 29 April 2009
Revision Note: V1.1 (April 29, 2009): Added an entry to Frequently Asked Questions to communicate that users with Windows Server 2008 Server Core installation do not need to install this update.Summary: Microsoft is releasing a new set of ActiveX kill bits with this advisory. |
|
Read more...
|
|
|
Microsoft Advisories
|
Wednesday, 22 April 2009
Severity Rating: Critical - Revision Note: V1.1 (April 22, 2009): Added Excel Viewer 2003 Service Pack 3 to the MBSA and SMS tables in the section, Detection and Deployment Tools and Guidance. This is an informational change only. There were no changes to the security update binaries or detection logic.Summary: This security update resolves a privately reported vulnerability and a publicly disclosed vulnerability in Microsoft Office Excel. The vulnerabilities could allow remote code execution if the user opens a specially crafted Excel file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. |
|
Read more...
|
|
|
Microsoft Advisories
|
Wednesday, 22 April 2009
Severity Rating: Critical - Revision Note: V1.1 (April 22, 2009): Added Microsoft Windows 2000 Service Pack 4 with DirectX 7.0 to the Non-Affected Software table. This is an informational change only.Summary: This security update resolves a privately reported vulnerability in Microsoft DirectX. The vulnerability could allow remote code execution if user opened a specially crafted MJPEG file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. |
|
Read more...
|
|
|
Microsoft Advisories
|
Wednesday, 22 April 2009
Severity Rating: Important - Revision Note: V1.1 (April 22, 2009): Corrected registry key verification entries in the deployment reference tables for ISA Server 2004 and ISA Server 2006.Summary: This security update resolves a privately reported vulnerability and a publicly disclosed vulnerability in Microsoft Internet Security and Acceleration (ISA) Server and Microsoft Forefront Threat Management Gateway (TMG), Medium Business Edition (MBE). These vulnerabilities could allow denial of service if an attacker sends specially crafted network packets to the affected system, or information disclosure or spoofing if a user clicks on a malicious URL or visits a Web site that contains content controlled by the attacker. |
|
Read more...
|
|
|
<< Start < Prev 1 2 3 4 5 6 7 8 9 10 Next > End >>
|
| Results 31 - 40 of 230 |
VoIP (Voice over IP) allows the integration of your data network and voice communication through a single medium, sending voice over your IP network (through LAN/WAN/Internet). 
Vendor Advisories 