Security Bulletin Advance Notification for December, 2010

On Tuesday, December 14, 2010, Microsoft is planning to release 17 updates addressing 40 vulnerabilities in Microsoft Windows, Office, Internet Explorer, SharePoint and Exchange. Two bulletins are rated Critical, 14 are rated Important, and one is rated Moderate.  


The updates will address the last Stuxnet-related issues.  This is a local Elevation of Privilege vulnerability.  Aside from Stuxnet, Microsoft has not seen evidence of its use in active exploits. Microsoft is also addressing the Internet Explorer vulnerability described in Security Advisory 2458511.

In reviewing the Advance Notice, note that six of the bulletins are not applicable to Windows 7. The bulletins for Microsoft Office Suites and Software apply to all versions from Microsoft Office XP Service Pack 3 through Office 2010, 64-bit.

References:

• MSRC Blog: Advance Notification Service for December 2010 Security Bulletins
• TechNet: December 2010 Advance Notification Service is released

Clubhouse Tags: Clubhouse, Microsoft, Windows, Security, Updates, Vulnerabilities, Information, Microsoft Office,

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Oracle SunJava Update

Oracle SunJava released an update to Java Runtime Environment (JRK).  The full internal version number for this update release is 1.6.0_23-b05 (where "b" means "build"). The external version number is 6u23.

This is not a security update.  The next security update is scheduled for 18 January 2011.  Rather, the update contains enhancements, described as follows:

• Improved performance and stability
• Enhanced support for right-to-left languages

Although Java is not required (See Do You Need Java?), if you do have Java installed on your computer, it is advisable to install the latest update. 

Download Update: Java SE Runtime Environment 6u23


Note: UNcheck any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.

Please check add/remove programs to ensure that you have uninstalled all prior (and vulnerable) versions of SunJava.

References:

• 6u23RelNotes
• Update Schedule: Critical Patch Updates

Clubhouse Tags: Clubhouse, Updates, Java

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

AVG Update Disaster Impacts Windows Users

Windows customers of AVG Antivirus ran into a problem with virus database 271.1.1/3292 (432/3292) released 12:53 AM CET.  When following through with the requested computer restart, instead of Windows loading, they received the error:

"STOP: c0000135 The program can't start because %hs is missing from your computer. Try reinstalling the program to fix this problem."

Although the update was removed from the servers as soon as they were aware of the problem, there were many impacted by this issue.  From reports on the AVG forum, it appears as though 64-bit systems were impacted by this issue.  Reports differ as to whether this issue was restricted to Windows 7 or if it also included Windows Vista customers.

AVG has provided suggested steps in the forum thread at Some Windows 7 Operating Systems Cannot Be Started After Latest Update, followed by an FAQ topic: System crash after the recent AVG 2011 update 3292 (BSOD).  

One AVE user reported the method at "Alternate Method" as successful with a failed repair disk.

If you are looking for a replacement antivirus solution, the following are free for personal use.

• avast! 5 Home Edition
• Avira AntiVir PersonalEdition Classic
• Microsoft Security Essentials

My favorite paid/licensed solution is ESET antivirus products.

Clubhouse Tags: Clubhouse, Windows, Security, AntiVirus, Information, MSE, Microsoft Security Essentials, Information, Windows Vista, Windows 7,

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...