[MS Security Bulletin] Advance Notification for December 2009 - Issued: December 3, 2009

Looks like 6 patches this month – 3 Critical and 3 Important:

********************************************************************
This is an advance notification of security bulletins that Microsoft is intending to release on December 8, 2009. The full version of the Microsoft Security Bulletin Advance Notification for December 2009 can be found at
http://www.microsoft.com/technet/security/bulletin/ms09-dec.mspx.

This bulletin advance notification will be replaced with the December bulletin summary on December 8, 2009. For more information about the bulletin advance notification service, see http://www.microsoft.com/technet/security/Bulletin/advance.mspx.


To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications on
http://www.microsoft.com/technet/security/bulletin/notify.mspx.


Microsoft will host a webcast to address customer questions on these bulletins on December 9, 2009, at 11:00 AM Pacific Time (US & Canada). Register for the Security Bulletin Webcast at
http://www.microsoft.com/technet/security/bulletin/summary.mspx.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information. This advance notification provides a number as the bulletin identifier, because the official Microsoft Security Bulletin numbers are not issued until release. The bulletin summary that replaces this advance notification will have the proper Microsoft Security Bulletin numbers (in the MSyy-xxx format) as the bulletin identifier. The security bulletins for this month are as follows, in order of severity:


Critical Security Bulletins
Bulletin 1
  - Affected Software:
    - Microsoft Windows 2000 Service Pack 4
    - Windows XP Service Pack 2 and
      Windows XP Service Pack 3
    - Windows XP Professional x64 Edition Service Pack 2
    - Windows Server 2003 Service Pack 2
    - Windows Server 2003 x64 Edition Service Pack 2
    - Windows Server 2003 with SP2 for Itanium-based Systems
    - Windows Vista,
      Windows Vista Service Pack 1, and
      Windows Vista Service Pack 2
    - Windows Vista x64 Edition,
      Windows Vista x64 Edition Service Pack 1, and
      Windows Vista x64 Edition Service Pack 2
    - Windows Server 2008 for 32-bit Systems and
      Windows Server 2008 for 32-bit Systems Service Pack 2
      (Windows Server 2008 Server Core installation not affected)
    - Windows Server 2008 for x64-based Systems and
      Windows Server 2008 for x64-based Systems Service Pack 2
      (Windows Server 2008 Server Core installation not affected)
    - Windows Server 2008 for Itanium-based Systems and
      Windows Server 2008 for Itanium-based Systems Service Pack 2
    - Impact: Remote Code Execution
    - Version Number: 1.0

Bulletin 3
  - Affected Software:
    - Microsoft Project 2000 Service Release 1
    - Microsoft Project 2002 Service Pack 1
    - Microsoft Office Project 2003 Service Pack 3
    - Impact: Remote Code Execution
    - Version Number: 1.0

Bulletin 4
  - Affected Software:
    - Internet Explorer 5.01 Service Pack 4 when installed on
      Microsoft Windows 2000 Service Pack 4
    - Internet Explorer 6 Service Pack 1 when installed on
      Microsoft Windows 2000 Service Pack 4
    - Internet Explorer 6 for
      Windows XP Service Pack 2 and
      Windows XP Service Pack 3
    - Internet Explorer 6 for
      Windows XP Professional x64 Edition Service Pack 2
    - Internet Explorer 6 for
      Windows Server 2003 Service Pack 2
    - Internet Explorer 6 for
      Windows Server 2003 x64 Edition Service Pack 2
    - Internet Explorer 6 for
      Windows Server 2003 with SP2 for Itanium-based Systems
    - Internet Explorer 7 for
      Windows XP Service Pack 2 and
      Windows XP Service Pack 3
    - Internet Explorer 7 for
      Windows XP Professional x64 Edition Service Pack 2
    - Internet Explorer 7 for
      Windows Server 2003 Service Pack 2
    - Internet Explorer 7 for
      Windows Server 2003 x64 Edition Service Pack 2
    - Internet Explorer 7 for
      Windows Server 2003 with SP2 for Itanium-based Systems
    - Internet Explorer 7 in
      Windows Vista,
      Windows Vista Service Pack 1, and
      Windows Vista Service Pack 2
    - Internet Explorer 7 in
      Windows Vista x64 Edition,
      Windows Vista x64 Edition Service Pack 1, and
      Windows Vista x64 Edition Service Pack 2
    - Internet Explorer 7 in
      Windows Server 2008 for 32-bit Systems and
      Windows Server 2008 for 32-bit Systems Service Pack 2
      (Windows Server 2008 Server Core installation not affected)
    - Internet Explorer 7 in
      Windows Server 2008 for x64-based Systems and
      Windows Server 2008 for x64-based Systems Service Pack 2
      (Windows Server 2008 Server Core installation not affected)
    - Internet Explorer 7 in
      Windows Server 2008 for Itanium-based Systems and
      Windows Server 2008 for Itanium-based Systems Service Pack 2
    - Internet Explorer 8 for
      Windows XP Service Pack 2 and
      Windows XP Service Pack 3
    - Internet Explorer 8 for
      Windows XP Professional x64 Edition Service Pack 2
    - Internet Explorer 8 for
      Windows Server 2003 Service Pack 2
    - Internet Explorer 8 for
      Windows Server 2003 x64 Edition Service Pack 2
    - Internet Explorer 8 in
      Windows Vista,
      Windows Vista Service Pack 1, and
      Windows Vista Service Pack 2
    - Internet Explorer 8 in
      Windows Vista x64 Edition,
      Windows Vista x64 Edition Service Pack 1, and
      Windows Vista x64 Edition Service Pack 2
    - Internet Explorer 8 in
      Windows Server 2008 for 32-bit Systems and
      Windows Server 2008 for 32-bit Systems Service Pack 2
      (Windows Server 2008 Server Core installation not affected)
    - Internet Explorer 8 in
      Windows Server 2008 for x64-based Systems and
      Windows Server 2008 for x64-based Systems Service Pack 2
      (Windows Server 2008 Server Core installation not affected)
    - Internet Explorer 8 in
      Windows 7 for 32-bit Systems
    - Internet Explorer 8 in
      Windows 7 for x64-based Systems
    - Internet Explorer 8 in
      Windows Server 2008 R2 for x64-based Systems
      (Windows Server 2008 R2 Server Core installation not affected)
    - Internet Explorer 8 in
      Windows Server 2008 R2 for Itanium-based Systems
    - Impact: Remote Code Execution
    - Version Number: 1.0


Important Security Bulletins
Bulletin 5
  - Affected Software:
    - Microsoft Windows 2000 Service Pack 4
    - Windows XP Service Pack 2 and
      Windows XP Service Pack 3
    - Windows XP Professional x64 Edition Service Pack 2
    - Windows Server 2003 Service Pack 2
    - Windows Server 2003 x64 Edition Service Pack 2
    - Windows Server 2003 with SP2 for Itanium-based Systems
    - Impact: Denial of Service
    - Version Number: 1.0

Bulletin 6
  - Affected Software:
    - Windows Server 2003 Service Pack 2
    - Windows Server 2003 x64 Edition Service Pack 2
    - Windows Server 2008 for 32-bit Systems and
      Windows Server 2008 for 32-bit Systems Service Pack 2
      (Windows Server 2008 Server Core installation not affected)
    - Windows Server 2008 for x64-based Systems and
      Windows Server 2008 for x64-based Systems Service Pack 2
      (Windows Server 2008 Server Core installation not affected)
    - Impact: Remote Code Execution
    - Version Number: 1.0

Bulletin 2
  - Affected Software:
    - Microsoft Windows 2000 Service Pack 4
    - Windows XP Service Pack 2 and
      Windows XP Service Pack 3
    - Windows XP Professional x64 Edition Service Pack 2
    - Windows Server 2003 Service Pack 2
    - Windows Server 2003 x64 Edition Service Pack 2
    - Windows Server 2003 with SP2 for Itanium-based Systems
    - Microsoft Office Word 2002 Service Pack 3
    - Microsoft Office Word 2003 Service Pack 3
    - Microsoft Works 8.5
    - Microsoft Office Converter Pack
    - Impact: Remote Code Execution
    - Version Number: 1.0

Read the complete post at http://wmug.co.uk/blogs/cliffs_blog/archive/2009/12/03/ms-security-bulletin-advance-notification-for-december-2009-issued-december-3-2009.aspx

Published Thursday, December 03, 2009 2:28 PM by Cliff Hobbs - FAQShop.com and Microsoft MVP ConfigMgr/ SMS
Filed under: , ,