DP's Security Bits

Issued: September 6, 2007
Updated: September 7, 2007

This is an advance notification of four security bulletins that
Microsoft is intending to release on September 11, 2007.

Critical Security Bulletins

Microsoft Security Bulletin 1

  - Affected Software:
    - Microsoft Windows 2000 Service Pack 4

    - Impact: Remote Code Execution
    - Version Number: 1.0


Important Security Bulletins

Microsoft Security Bulletin 2

  - Affected Software:
    - Visual Studio .NET 2002 Service Pack 1 (KB937057)
    - Visual Studio .NET 2003(KB937058)
    - Visual Studio .NET 2003 Service Pack 1 (KB937059)
    - Visual Studio 2005 (KB937060)
    - Visual Studio 2005 Service Pack 1 (KB937061)

    - Impact: Remote Code Execution
    - Version Number: 1.0

Microsoft Security Bulletin 3

  - Affected Software:
    - Windows Services for UNIX 3.0 on Windows 2000 Service Pack 4
    - Windows Services for UNIX 3.5 on Windows 2000 Service Pack 4
    - Windows Services for UNIX 3.0 on Windows XP Service Pack 2
    - Windows Services for UNIX 3.5 on Windows XP Service Pack 2
    - Windows Services for UNIX 3.0 on Windows Server 2003 Service
      Pack 1 and Windows Server 2003 Service Pack 2
    - Windows Services for UNIX 3.5 on Windows Server 2003 Service
      Pack 1 and Windows Server 2003 Service Pack 2
    - Subsystem for UNIX-based Applications on Windows Server 2003
      Service Pack 1 and Windows Server 2003 Service Pack 2
    - Subsystem for UNIX-based Applications on Windows Server 2003
      x64 Edition and Windows Server 2003 x64 Edition Service Pack 2
    - Subsystem for UNIX-based Applications on Windows Vista
    - Subsystem for UNIX-based Applications on Windows Vista x64
      Edition

    - Impact: Elevation of Privilege
    - Version Number: 1.0

Microsoft Security Bulletin 4

  - Affected Software:
    - MSN Messenger 6.2
    - MSN Messenger 7.0
    - MSN Messenger 7.5
    - Windows Live Messenger 8.0

    - Impact: Remote Code Execution
    - Version Number: 1.0


Other Information

Microsoft Windows Malicious Software Removal Tool:

Microsoft will release an updated version of the Microsoft Windows
Malicious Software Removal Tool on Windows Update, Microsoft Update,
Windows Server Update Services, and the Download Center.

Non-Security, High-Priority Updates on MU, WU, and WSUS:

For this month:

* Microsoft is planning to release one non-security,
  high-priority update on Microsoft Update (MU) and
  Windows Server Update Services (WSUS).

* Microsoft is planning to release zero non-security,
  high-priority updates for Windows on Windows Update (WU).

Note that this information pertains only to non-security,
high-priority updates on Microsoft Update, Windows Update, and
Windows Server Update Services, and released on the same day as the
Security Bulletin Summary. Information will not be provided about
non-security updates released on other days.

Revision

September 7, 2007: Bulletin Advance Notification updated. Microsoft
plans to release four security bulletins, and no longer plans to
release Microsoft Security Bulletin 5 affecting Windows and
SharePoint Server, on Tuesday, September 11, 2007.

Filed under: Advisories / Bulletins