Microsoft Security Bulletin Summary for August,

Critical (9)

Bulletin Identifier Microsoft Security Bulletin MS06-040
Vulnerability in Server Service Could Allow Remote Code Execution 921883
http://www.microsoft.com/technet/security/Bulletin/MS06-040.mspx


Bulletin Identifier Bulletin Identifier Microsoft Security Bulletin MS06-041
Vulnerability in DNS Resolution Could Allow Remote Code Execution 920683
http://www.microsoft.com/technet/security/Bulletin/MS06-041.mspx

Bulletin Identifier Microsoft Security Bulletin MS06-042
Cumulative Security Update for Internet Explorer 918899
http://www.microsoft.com/technet/security/Bulletin/MS06-042.mspx

Bulletin Identifier Microsoft Security Bulletin MS06-043
Vulnerability in Microsoft Windows Could Allow Remote Code Execution 920214
http://www.microsoft.com/technet/security/Bulletin/MS06-044.mspx

Bulletin Identifier Microsoft Security Bulletin MS06-044
Vulnerability in Microsoft Management Console Could Allow Remote Code Execution 917008
http://www.microsoft.com/technet/security/Bulletin/MS06-045.mspx

Bulletin Identifier Microsoft Security Bulletin MS06-045
Vulnerability in Windows Explorer Could Allow Remote Code Execution 921398
http://www.microsoft.com/technet/security/Bulletin/MS06-045.mspx

Bulletin Identifier Microsoft Security Bulletin MS06-046
Vulnerability in HTML Help Could Allow Remote Code Execution 922616
http://www.microsoft.com/technet/security/Bulletin/MS06-046.mspx

Bulletin Identifier Microsoft Security Bulletin MS06-047
Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution 921645
http://www.microsoft.com/technet/security/Bulletin/MS06-047.mspx

Bulletin Identifier Microsoft Security Bulletin MS06-048
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution 922968
http://www.microsoft.com/technet/security/Bulletin/MS06-048.mspx

Bulletin Identifier Microsoft Security Bulletin MS06-051
Vulnerability in Windows Kernel Could Result in Remote Code Execution 917422
http://www.microsoft.com/technet/security/Bulletin/MS06-051.mspx

Important (3)
Bulletin Identifier Microsoft Security Bulletin MS06-045
Vulnerability in Windows Explorer Could Allow Remote Code Execution 921398
http://go.microsoft.com/fwlink/?LinkId=69730

Bulletin Identifier Microsoft Security Bulletin MS06-049
Vulnerability in Windows Kernel Could Result in Elevation of Privilege 920958
http://www.microsoft.com/technet/security/Bulletin/MS06-049.mspx

Bulletin Identifier Microsoft Security Bulletin MS06-050
Vulnerabilities in Microsoft Windows Hyperlink Object Library Could Allow Remote Code Execution 920670
http://www.microsoft.com/technet/security/Bulletin/MS06-050.mspx

Re-Released Bulletins:
ASP.NET Path Validation Vulnerability (887219)
http://www.microsoft.com/technet/security/Bulletin/ms05-004.mspx

Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (915384)
http://www.microsoft.com/technet/security/Bulletin/ms06-039.mspx

As always, download the updates only from the vendors website - visit Windows Update and Office Update or Microsoft Update websites. You may also get the updates thru Automatic Updates functionality in Windows system.

Webcast:
Microsoft will host a webcast tomorrow. The webcast focuses on addressing your questions and concerns about the security bulletins. Therefore, most of the live webcast is aimed at giving you the opportunity to ask questions and get answers from their security experts.

Start Time: Wednesday, August 09, 2006 11:00 AM Pacific Time (US & Canada)
End Time: Wednesday, August 09, 2006 12:00 PM Pacific Time (US & Canada)

Presenter: Christopher Budd, CISA, CISM, CISSP, ISSMP Security Program Manager, PSS Security, Microsoft Corporation and Mike Reavey, Lead Security Program Manager, Microsoft Corporation

Security Tool:
Find out if you are missing important Microsoft product updates by using MBSA.

Edited by NICK_ADSL_UK (Tue 08-Aug-06 23:39:40)

The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running Windows Server 2003, Windows XP, or Windows 2000
View products that this article applies to.
Article ID : 890830
Last Review : August 8, 2006
Revision : 23.0
http://support.microsoft.com/?kbid=890830

Families Cleaned by the Malicious Software Removal Tool
Additions Are Made Each Month to Address the Latest Threats
Published: April 12, 2005 | Updated: August 8, 2006


Run the tool from the Microsoft.com Web site, or download the tool and run it locally on your computer.

The Microsoft Windows Malicious Software Removal Tool removes specific, prevalent malicious software families from computers running compatible versions of Windows. Microsoft releases a new version of the tool on the second Tuesday of every month, and as needed to respond to security incidents.

New Malicious Software
The following malicious software was added this release.

Is it me or is Windows Update getting slower to find updates

yup, the same for me as well.

me too....then some won't install

Hi banger
The updates are normally with the server at around 7pm GMT. The best time to do your updating is around midnight when the rush hour has passed

Regards

Thanx for the info Nick.

Microsoft Security Advisory (922437)

Exploit Code Published Affecting the Server Service
Published: August 11, 2006 | Updated: August 13, 2006

Microsoft is aware of public reports regarding an attack known as Win32/Graweg exploiting the vulnerability addressed by security update MS06-040.
http://www.microsoft.com/technet/security/bulletin/ms06-040.mspx

Microsoft