MVP Jubo Security Blog

New Downloads at Download Center

Actually as a note to myself, but there are a few interesting downloads available at the Microsoft Download Center:

• SQL Server 2000 Books Online June 2007 Update
• This update includes the complete documentation that shipped with SQL Server 2000, including corrections to inaccuracies that describe the protection when creating database objects using the WITH ENCRYPTION option.
•  Windows Script 5.7 for Windows XP
• This download installs Microsoft® Windows® Script containing Visual Basic® Script Edition (VBScript.) Version 5.7, JScript® Version 5.7, Windows Script Components, Windows Script Host 5.7, and Windows Script Runtime Version 5.7.

Microsoft Security Bulletin Summary for August 2007

Lots of updates for this month. There are six "critical" and three "important" updates. On Tuesday, August 14th, Microsoft released the following updates:

 Critical:

• MS07-042 - Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (936227)
• MS07-043 - Vulnerability in OLE Automation Could Allow Remote Code Execution (921503)
• MS07-044 - Vulnerability in Microsoft Excel Could Allow Remote Code Execution (940965)
• MS07-045 - Cumulative Security Update for Internet Explorer (937143)
• MS07-046 - Vulnerability in GDI Could Allow Remote Code Execution (938829)
• MS07-050 - Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127)

Important:

• MS07-047 - Vulnerability in Windows Media Player Could Allow Remote Code Execution (936782)
• MS07-048 - Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)
• MS07-049 - Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

A more technical version of the Security Bulletin can be found at TechNet and an end-user version is available at Microsoft's Security At Home site.

You can obtain the security updates offered this month on Windows Update, from Download Center on Security and Critical Releases ISO CD Image files. For more information, see Microsoft Knowledge Base Article 913086.

Support:

• Customers in the U.S. and Canada can receive technical support from Microsoft Product Support Services at 1-866-PCSAFETY. International customers can receive support from their local Microsoft subsidiaries. Visit the International Support Web site.

See also: MRSC: August 2007 Monthly Bulletin Release.

McAfee Scan Engine 5200

A new McAfee Scan Engine is available for elective download at McAfee's Security Updates web site. The McAfee update site will be updated to the 5200 Engine on September 5, 2007.

Related documents:

• Upcoming new elective download package and AutoUpdate package for the 5200 Engine
• Expected results when the 5200 engine is posted to the AutoUpdate site and deployed in a managed environment
• End of Life statement for the McAfee Anti-Virus Scan Engine 4400