Security Bulletin Release: November 2007

What is this alert?

This alert is to provide you with an overview of the new Security Bulletin being released on 13 November 2007.

New Security Bulletins

Microsoft is releasing the following two new security bulletins for newly discovered vulnerabilities:

Bulletin Number

Maximum Severity

Affected Products

Impact

MS07-061

Critical

Windows XP, Windows Server 2003

Remote Code Execution

MS07-062

Important

Windows 2000, Windows Server 2003

Spoofing

Summaries for these new bulletins can be found here.

Re-released Security Bulletins

In addition, Microsoft is re-releasing the following security bulletin:

MS07-049 - Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

Summary: The security update for Microsoft Virtual PC 2004, Microsoft Virtual PC 2004 Service Pack 1, Microsoft Virtual Server 2005 Standard Edition, and Microsoft Virtual Server 2005 Enterprise Edition did not correctly install on Windows 2000 Service Pack 4 due to a registry key issue. A revised security update is now available to install on Windows 2000 Service Pack 4. Microsoft recommends that customers apply the update at the earliest opportunity. No action is required on systems where the security update has been successfully installed.

Microsoft Windows Malicious Software Removal Tool

Microsoft is releasing an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Server Update Services (WSUS), Windows Update (WU) and the Download Centre. Note that this tool will NOT be distributed using Software Update Services (SUS). Information on the Microsoft Windows Malicious Software Removal Tool can be located here:

 

High-Priority Non-Security Updates

High priority non-security updates Microsoft releases to be available on Microsoft Update (MU), Windows Update (WU) or Windows Server Update Services (WSUS) will be detailed in the following KB Article:

 

TechNet Webcast: Microsoft will host a Webcast to address customer questions on these bulletins:

Title: Information about Microsoft November Security Bulletins (Level 200)

Date: Wednesday, November 14th, 2007 11:00 AM Pacific Time (US & Canada)

URL: https://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?culture=en-US&EventID=1032344694

Replay: Available 24 hours after webcast - same URL

Technorati Tags: Security,Patching,Updates,Windows Update,Microsoft Update

Cheers, Jeffa