Out-of-Band Security Release 17DEC08

Microsoft has announced that there will be an out-of-band security release tomorrow, December 17, 2008, to address Security Advisory 960906 relating to reports of a vulnerability in the Wordpad Converter for Word 97 files.

Originally it was thought that this vulnerability affected only Windows 2000 SP4, Windows XP SP2 and Windows Server 2003 SP1 and SP2. However, after further investigation, it was discovered that the vulnerability also affected Windows Vista, both 32 and 64 Bit, with and without SP1 as Windows Server, Windows 7 and essentially all versions of Internet Explorer. The full list is available in the Security Advisory.

References:

TechNet:

• Microsoft Security Bulletin Advance Notification
• Security Advisory 960906

MSRC Blog:

• Microsoft Security Advisory 961051
• Microsoft Security Advisory 961051 Updated
• Friday update for Microsoft Security Advisory 961051
• Advance Notification for December 2008 Out-of-Band Release

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...