Microsoft Security Bulletins for 2/10/04

[Enyo]

Today Microsoft released the following Security Bulletins.

Bulletins Summaries:

Windows: http://www.microsoft.com/technet/security/bulletin/winfeb04.asp
Microsoft Macintosh Products:http://www.microsoft.com/technet/security/bulletin/macfeb04.asp

Critical Bulletins:

MS04-007 - ASN .1 Vulnerability Could Allow Code Execution (828028)

http://www.microsoft.com/technet/security/bulletin/MS04-007.asp

Important Bulletins:

MS04-005 - Vulnerability in Virtual PC could lead to privilege elevation (835150)

http://www.microsoft.com/technet/security/bulletin/MS04-005.asp

MS04-006 - Vulnerability in the Windows Internet Naming Service (WINS) Could Allow Code Execution (830352)

http://www.microsoft.com/technet/security/bulletin/MS04-006.asp

This represents Microsoft's regular scheduled monthly bulletin release (second Tuesday of each month).

Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft security bulletins. Any e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the Microsoft.com download center or Windows Update. See the individual bulletins for details.
____________________________________

Security Bulletin Discussion:

Each month, after Microsoft release a security patch, the PSS Security Core team will conduct a chat to explain the patch and vulnerability to users and allow those users to understand the impact of the patch in their environments.

February 13 [9:30am Pacific/5:30pm GMT]

http://communities2.microsoft.com/home/chatroom.aspx?siteid=34000015

Notification Service:

Microsoft offers e-mail alerts that notify you when they release an important security bulletin or virus alert, or when you might need to take action to guard against a circulating threat.

http://www.microsoft.com/security/security_bulletins/alerts2.asp

 

[muzikool]

Thanks Enyo, I'll grab those patches today.

 

[Tiesto]

*sigh* More Windows Vulnerbilities to deal with, thanks for the heads up Enyo.

 

[Kr0m]

Not news worthy? I submitted this as news 2 minutes after I received the alert in my email lastnight.

 

[Enyo]

I regularly post these notifications in the security forum as soon as Jerry Byrant from MS makes the information available this is often before the notification service sends out mailshots. I can't predict that someone may submit it to news at a later time.

The news team will get to your submission and post it, this does not happen instantly. I am not a member of the news team so cant post it on the frontpage.

 

[Terrahertz]

The usual stuff eh...oh well a downloading we will go

 

[polyglory]

Its making a Collander look like a block of concrete