July 2008 Microsoft Security Bulletin Release

Update:

• If you use ZoneAlarm Firewall and Windows XP, Microsoft Update MS08-037 (KB 951748) may cause a problem connecting to the internet. See the temporary workaround in MS update KB951748 and ZoneAlarm --- PROBLEM
  
  MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008

~~~~~~~~~~~~~~~~~

Below is an overview of the new Microsoft security bulletins being released today. Security bulletins are released monthly to resolve critical problem vulnerabilities.

Microsoft is also releasing an updated version of the Microsoft Windows Malicious Software Removal Tool (MSRT). Note that it is necessary to accept the license terms in order to continue with the installation of the updated tool. I would encourage everyone to do so. This tool has had excellent results in removing malware from computers around the world.

The prompt is as shown in the screen copy below. A copy/paste of the full text of the license terms is available at Tidbits.




NEW SECURITY BULLETINS

Microsoft is releasing the following four new security bulletins for newly discovered vulnerabilities:

Bulletin Number: MS08-037

Maximum Severity: Important
Affected Products: Windows 2000, Windows XP, Windows Server 2003, Windows Server 2008.
Impact: Spoofing

Bulletin Number: MS08-038

Maximum Severity: Important
Affected Products: Windows Vista and Windows Server 2008
Impact: Remote Code Execution

Bulletin Number: MS08-039

Maximum Severity: Important
Affected Products: Exchange Server 2003 and Exchange Server 2007
Impact: Elevation of Privilege

Bulletin Number: MS08-040

Maximum Severity: Important
Affected Products: SQL Server 7.0, SQL Server 2000, SQL Server 2005, MSDE 1.0, MSDE 2000, SQL Server 2005 Express, SQL Server 2005 Express with Advanced Services, WMSDE, Windows Internal Database (WYukon)
Impact: Elevation of Privilege

References:

MSRT: Microsoft Windows Malicious Software Removal Tool
MSRC BLog: July 2008 Bulletin Monthly Release
TechNet: Microsoft Security Bulleting Summary for July 2008

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...