Received February 16, 2009 at 8:58 pm:
********************************************************************
Title: Microsoft Security Bulletin Minor Revisions
Issued: February 16, 2009
********************************************************************
Summary
=======
The following bulletins have undergone a minor revision increment.
Please see the appropriate bulletin for more details.
* MS09-002 - Critical
Bulletin Information:
=====================
* MS09-002 - Critical
- http://www.microsoft.com/technet/security/bulletin/ms09-002.mspx
- Reason for Revision: V1.1 (February 16, 2009): Added a link to
Microsoft Knowledge Base Article 961260 under Known Issues in
the Executive Summary.
- Originally posted: February 10, 2009
- Updated: February 16, 2009
- Bulletin Severity Rating: Critical
- Version: 1.1
Received February 16, 2009 at 11:27 pm:
********************************************************************
Title: Microsoft Security Bulletin Re-Releases
Issued: February 16, 2009
********************************************************************
Summary
=======
The following bulletins have undergone a major revision increment.
Please see the appropriate bulletin for more details.
* MS09-003 - Critical
Bulletin Information:
=====================
* MS09-003 - Critical
- http://www.microsoft.com/technet/security/bulletin/ms09-003.mspx
- Reason for Revision: V2.0 (February 16, 2009): Added the
Microsoft Exchange Server MAPI Client as affected software.
Also, added several entries to the section, Frequently Asked
Questions (FAQ) Related to This Security Update, relating to
updating the MAPI Client and the Exchange System Management
tools. No other update packages are affected by this
re-release. Customers running all other supported and
affected versions of Microsoft Exchange Server who have
already successfully applied the original security update
packages do not need to take any further action.
- Originally posted: February 10, 2009
- Updated: February 16, 2009
- Bulletin Severity Rating: Critical
- Version: 2.0
Received February 11, 2209 at 9:32 pm
********************************************************************
Title: Microsoft Security Bulletin Minor Revisions
Issued: February 11, 2009
********************************************************************
Summary
=======
The following bulletins have undergone a minor revision increment.
Please see the appropriate bulletin for more details.
* MS08-070 - Critical
* MS08-040 - Important
Bulletin Information:
=====================
* MS08-070 - Critical
- http://www.microsoft.com/technet/security/bulletin/ms08-070.mspx
- Reason for Revision: V1.2 (February 11, 2009): Clarified the
class IDs for two ActiveX controls. First, listed a second
class ID in the workaround, "Prevent Windows Common AVI
ActiveX Control from running in Internet Explorer," for
CVE-2008-4255. Second, listed in the section, Frequently
asked questions (FAQ) related to this security update, the
class ID for the Winsock Control for which the kill bit is
being set as a security-related change to functionality in
this update. This is an informational change only. There were
no changes to the security update files in this bulletin.
- Originally posted: December 9, 2008
- Updated: February 11, 2009
- Bulletin Severity Rating: Critical
- Version: 1.2
* MS08-040 - Important
- http://www.microsoft.com/technet/security/bulletin/ms08-040.mspx
- Reason for Revision: V1.8 (February 11, 2009): Removed erroneous
reference to Microsoft SQL Server 2000 Desktop Engine (WMSDE)
on Microsoft Windows 2000 Service Pack 4 from the Affected
Software table for Windows Components. Also changed the log
file entry in the Reference table for Windows Internal
Database (WYukon) in the Security Update Deployment section.
- Originally posted: July 8, 2008
- Updated: February 11, 2009
- Bulletin Severity Rating: Important
- Version: 1.8
Received February 10, 2009 at 4:31 pm (sorry I'm late in posting it)
********************************************************************
Microsoft Security Bulletin Summary for February 2009
Issued: February 10, 2009
********************************************************************
This bulletin summary lists security bulletins released for February 2009.
The full version of the Microsoft Security Bulletin Summary for February 2009 can be found at http://www.microsoft.com/technet/security/bulletin/ms09-feb.mspx.
With the release of the bulletins for February 2009, this bulletin summary replaces the bulletin advance notification originally issued on February 5, 2009. For more information about the bulletin advance notification service, see http://www.microsoft.com/technet/security/Bulletin/advance.mspx.
To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications on http://www.microsoft.com/technet/security/bulletin/notify.mspx.
Microsoft will host a webcast to address customer questions on these bulletins on Wednesday, February 11, 2009, at 11:00 AM Pacific Time (US & Canada). Register for the February Security Bulletin Webcast at http://www.microsoft.com/technet/security/bulletin/summary.mspx.
Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Critical Security Bulletins
===========================
Microsoft Security Bulletin MS09-002
- Affected Software:
- Internet Explorer 7 for
Windows XP Service Pack 2 and
Windows XP Service Pack 3
- Internet Explorer 7 for
Windows XP Professional x64 Edition and
Windows XP Professional x64 Edition Service Pack 2
- Internet Explorer 7 for
Windows Server 2003 Service Pack 1 and
Windows Server 2003 Service Pack 2
- Internet Explorer 7 for
Windows Server 2003 x64 Edition and
Windows Server 2003 x64 Edition Service Pack 2
- Internet Explorer 7 for
Windows Server 2003 with SP1 for Itanium-based Systems and
Windows Server 2003 with SP2 for Itanium-based Systems
- Internet Explorer 7 in
Windows Vista and
Windows Vista Service Pack 1
- Internet Explorer 7 in
Windows Vista x64 Edition and
Windows Vista x64 Edition Service Pack 1
- Internet Explorer 7 in
Windows Server 2008 for 32-bit Systems
(Windows Server 2008 Server Core installation not affected)
- Internet Explorer 7 in
Windows Server 2008 for x64-based Systems
(Windows Server 2008 Server Core installation not affected)
- Internet Explorer 7 in
Windows Server 2008 for Itanium-based Systems
- Impact: Remote Code Execution
- Version Number: 1.0
Microsoft Security Bulletin MS09-003
- Affected Software:
- Microsoft Exchange 2000 Server Service Pack 3 with the Update
Rollup of August 2004
- Microsoft Exchange Server 2003 Service Pack 2
- Microsoft Exchange Server 2007 Service Pack 1
(Includes 32-bit and x64-based editions)
- Impact: Remote Code Execution
- Version Number: 1.0
Important Security Bulletins
============================
Microsoft Security Bulletin MS09-004
- Affected Software:
- Microsoft SQL Server 2000 Desktop Engine (WMSDE) on
Windows Server 2003 Service Pack 1 and
Windows Server 2003 Service Pack 2
- Windows Internal Database (WYukon) Service Pack 2 on
Windows Server 2003 Service Pack 1 and
Windows Server 2003 Service Pack 2
- Microsoft SQL Server 2000 Desktop Engine (WMSDE) on
Windows Server 2003 x64 Edition and
Windows Server 2003 x64 Edition Service Pack 2
- Windows Internal Database (WYukon) x64 Edition Service Pack 2
on Windows Server 2003 x64 Edition and
Windows Server 2003 x64 Edition Service Pack 2
- Windows Internal Database (WYukon) Service Pack 2
on Windows Server 2008 for 32-bit Systems
(Windows Server 2008 Server Core installation affected)
- Windows Internal Database (WYukon) x64 Edition Service Pack 2
on Windows Server 2008 for x64-based Systems
(Windows Server 2008 Server Core installation affected)
- GDR update for SQL Server 2000 Service Pack 4
- QFE update for SQL Server 2000 Service Pack 4
- GDR update for SQL Server 2000
Itanium-based Edition Service Pack 4
- QFE update for SQL Server 2000
Itanium-based Edition Service Pack 4
- GDR update for SQL Server 2005 Service Pack 2
- QFE update for SQL Server 2005 Service Pack 2
- GDR update for SQL Server 2005 x64 Edition Service Pack 2
- QFE update for SQL Server 2005 x64 Edition Service Pack 2
- GDR update for SQL Server 2005 with SP2 for
Itanium-based Systems
- QFE update for SQL Server 2005 with SP2 for
Itanium-based Systems
- GDR update for Microsoft SQL Server 2000
Desktop Engine (MSDE 2000) Service Pack 4
- QFE update for Microsoft SQL Server 2000
Desktop Engine (MSDE 2000) Service Pack 4
- GDR update for SQL Server 2005
Express Edition Service Pack 2
- QFE update for SQL Server 2005
Express Edition Service Pack 2
- GDR update for SQL Server 2005
Express Edition with Advanced Services Service Pack 2
- QFE update for SQL Server 2005
Express Edition with Advanced Services Service Pack 2
- Impact: Remote Code Execution
- Version Number: 1.0
Microsoft Security Bulletin MS09-005
- Affected Software:
- Microsoft Office Visio 2002 Service Pack 2
- Microsoft Office Visio 2003 Service Pack 3
- Microsoft Office Visio 2007 Service Pack 1
- Impact: Remote Code Execution
- Version Number: 1.0