The IE Cumulative Update for August 2007 has been released
The IE Cumulative Security Update for August 2007 is now available via Windows, Microsoft and Automatic Update.
Information about the cumulative update can be found here:
http://www.microsoft.com/technet/security/Bulletin/ms07-027.mspx
The update fixes three remote code execution vulnerabilities and sets killbits for some vulnerable third-party ActiveX controls at the request of the controls owners.
Details:
Microsoft Security Bulletin MS07-045:
http://www.microsoft.com/technet/security/Bulletin/ms07-045.mspx
Microsoft Knowledge Base article 937143
http://support.microsoft.com/kb/937143
This month's update also fixes the an unexpected “Save File” security dialog box seen by some IE users when they start IE after they installed the May cumulative update and when they have relocated the “Temporary Internet Files” folder to a non-standard locations.
Other security updates released this month are:
MS07-042 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (936227)
MS07-043 Vulnerability in OLE Automation Could Allow Remote Code Execution (921503)
MS07-044 Vulnerability in Microsoft Excel Could Allow Remote Code Execution (940965)
MS07-046 Vulnerability in GDI Could Allow Remote Code Execution (938829)
MS07-047 Vulnerabilities in Windows Media Player Could Allow Remote Code Execution (936782)
MS07-048 Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)
MS07-049 Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)
MS07-050 Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127)
There has also been a detection change to MS07-038 (Vulnerability in Windows Vista Firewall Could Allow Information Disclosure) (935807) to fix a problem discovered where a missing Firewall Logging Directory would cause the update installation to fail.
Finally, MS have released Microsoft Security Advisory (932596) for users of x64-based Windows operating systems. An update to Kernel Patch Protection is now available that adds additional checks to Kernel Patch Protection for increased reliability, performance and security.