Microsoft Security Bulletin Advance Notification for February 2008

February is looking to be a big month for updates, both security and non-security. In addition to an updated version of the Microsoft Windows Malicious Software Removal Tool, Microsoft is further planning to release

seven non-security, high-priority updates and

two non-security, high-priority updates for Windows

on Microsoft Update (MU) and Windows Server Update Services (WSUS).

Note:

The information provided in the Security Bulletin Advance Notice pertains only to non-security, high-priority updates on Microsoft Update, Windows Update, and Windows Server Update Services released on the same day as the security bulletin summary. Information is not provided about non-security updates released on other days.

Below is a summary of the February 2008 Microsoft Security bulletins (in order of severity). Microsoft Baseline Security Analyzer can detect whether your computer system requires these updates. Some of the updates will require a restart.

Critical

Microsoft Security Bulletin 5

Impact of Vulnerability: Remote Code Execution
Affected Software: Windows.

Microsoft Security Bulletin 6

Impact of Vulnerability: Remote Code Execution
Affected Software: Windows, Office, Visual Basic.

Microsoft Security Bulletin 7

Impact of Vulnerability: Remote Code Execution
Affected Software: Windows, VBScript, JScript.

Microsoft Security Bulletin 8

Impact of Vulnerability: Remote Code Execution

Affected Software: Windows, Internet Explorer.

Microsoft Security Bulletin 10

Impact of Vulnerability: Remote Code Execution

Affected Software: Office.

Microsoft Security Bulletin 11

Impact of Vulnerability: Remote Code Execution

Affected Software: Office.

Microsoft Security Bulletin 12

Impact of Vulnerability: Remote Code Execution
Affected Software: Office.

Important

Microsoft Security Bulletin 1

Impact of Vulnerability: Denial of Service

Affected Software: Windows, Active Directory, ADAM.

Microsoft Security Bulletin 2

Impact of Vulnerability: Denial of Service

Affected Software: Windows.

Microsoft Security Bulletin 3

Impact of Vulnerability: Elevation of Privilege

Affected Software: Windows, IIS.

Microsoft Security Bulletin 4

Impact of Vulnerability: Remote Code Execution

Affected Software: Windows, IIS.

Microsoft Security Bulletin 9

Impact of Vulnerability: Remote Code Execution

Affected Software: Office, Works, Works Suite.

References:

• MSRC Blog: February 2008 Advance Notification

• TechNet: Microsoft Security Bulletin Advance Notification for February 2008

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...