Windows 7: List of Available Hotfixes for Windows 7

-Article ID: 2728973 - Last Review: July 10, 2012 - Revision: 1.0
Microsoft Security Advisory: Unauthorized digital certificates could allow spoofing.

Files are available for download from the Microsoft Download Center:
Microsoft Security Advisory: Unauthorized digital certificates could allow spoofing



-Article ID: 2732052 - Last Review: August 14, 2012 - Revision: 1.0
August 2012 cumulative time zone update for Windows operating systems

Summary:
This update supersedes and replaces update 2633952, which was released in December 2011. All additional time zone changes released as hotfixes after update 2633952 are incorporated in this update.

If you have already deployed update 2633952, read the descriptions of the specific time zone changes that are addressed in this article to determine whether you must deploy this update immediately. If systems are not directly affected, you can schedule deployment at the next available opportunity.

We recommend that you deploy the most current Windows cumulative time zone update to guarantee the consistency of the time zone database on all systems.

Files are available for download from the Microsoft Download Center:
August 2012 cumulative time zone update for Windows operating systems




-Article ID: 2744850 - Last Review: August 20, 2012 - Revision: 1.4
Implementing PEAP-MS-CHAP v2 authentication for Microsoft PPTP VPNs.

Introduction:
Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2) is a password-based authentication protocol which is widely used as an authentication method in PPTP-based (Point to Point Tunneling Protocol) VPNs. Microsoft cautions that any organizations that use MS-CHAP v2 without encapsulation in conjunction with PPTP tunnels for VPN connectivity are running in a potentially nonsecure configuration.
Recommendations:
Microsoft suggests that organizations using MS-CHAP v2/PPTP implement the Protected Extensible Authentication Protocol (PEAP) in their networks. This mitigates this technique by encapsulating the MS-CHAP v2 authentication traffic in TLS.
Configure PPTP to use PEAP-MS-CHAP v2 for authentication:
Implementing PEAP-MS-CHAP v2 authentication for Microsoft PPTP VPNs




-Article ID: 2661254 - Last Review: August 21, 2012 - Revision: 2.1
Microsoft Security Advisory: Update for minimum certificate key length.

Introduction:
To reduce the risk of unauthorized exposure of sensitive information, Microsoft has released a nonsecurity update (KB 2661254) for all supported versions of Microsoft Windows. This update will block cryptographic keys that are less than 1024 bits long. This update does not apply to Windows 8 Release Preview or Windows Server 2012 Release Candidate because these operating systems already include the functionality to block the use of weak RSA keys that are less than 1024 bits long.


NOTE: Please read the "Known issues with this security update" & registry settings before any actions.

Files are available for download from the Microsoft Download Center:
Microsoft Security Advisory: Update for minimum certificate key length

For x32bits:
Download: Update for Windows 7 (KB2661254) - Microsoft Download Center - Download Details
For x64bits:
Download: Update for Windows 7 for x64-based Systems (KB2661254) - Microsoft Download Center - Download Details

-Article ID: 2707082 - Last Review: August 30, 2012 - Revision: 2.0
An instance of the JScript scripting engine leaks memory when Internet Explorer 8 or Internet Explorer 9 is installed on a computer that is running Windows 7 or Windows Server 2008 R2.

Symptoms:

Consider the following scenario:

• You have Windows Internet Explorer 8 or Internet Explorer 9 installed on a computer that is running Windows 7 or Windows Server 2008 R2.
• You create an instance of the JScript scripting engine by using the IActiveScriptSite interface and the IActiveScript interface.
• You execute a script in the new instance of the JScript scripting engine.
• You release the instance of the JScript scripting engine. However, you do not close the instance.
• You call and then release the script objects

In this scenario, you may notice that the instance of the JScript scripting engine leaks memory.

To resolve this problem, install the update that is described this section.
http://support.microsoft.com/kb/2707082/en-us

Note: If you have security update 2706045 installed, you do not have to install this update.




-Article ID: 2751647 - Last Review: August 30, 2012 - Revision: 1.0
How to disable the Java web plug-in in Internet Explorer.

Introduction:
Java is a unique form of extensibility because it can be invoked in two ways:

• By using an applet element
• By using an objet element that has a CLSID of a Java Virtual Machine (JVM)

These two invocation methods are subject to different security controls. This Knowledge Base Article contains instructions to configure these two security controls through the registry.

Customers can disable Java by setting kill bits for the Java CLSIDs and by setting the URL action to Disable.

NOTE: Those are registry settings, backup before any further action.

Infos:
How to disable the Java web plug-in in Internet Explorer

-Article ID: 2721691 - Last Review: July 10, 2012 (Updated: Wednesday, August 15, 2012)- Revision: 1.0
MS12-043: Description of the security update for XML Core Services 4.0: July 10, 2012.

Introductions & Infos: Microsoft Security Bulletin MS12-043 - Critical


More information about this security update & Known issues with this security update:
MS12-043: Description of the security update for XML Core Services 4.0: July 10, 2012

Direct Download Links:

x64bits:
Download: Security Update for Microsoft XML Core Services 4.0 Service Pack 3 for x64-based Systems (KB2721691) - Microsoft Download Center - Download Details
x32bits:
Download: Security Update for Microsoft XML Core Services 4.0 Service Pack 3 (KB2721691) - Microsoft Download Center - Download Details

-Article ID: 2757760 - Last Review: September 20, 2012 - Revision: 2.0
Microsoft Security Advisory: Vulnerability in Internet Explorer could allow remote code execution.

Introduction:
Microsoft has released a Microsoft security advisory about this issue for IT professionals. The security advisory contains additional security-related information. To view the security advisory, go to the following Microsoft website: Microsoft Security Advisory (2757760).

FIX-IT Solution:
Microsoft Security Advisory: Vulnerability in Internet Explorer could allow remote code execution

Notes:

• For computers that are running 64-bit operating systems, the following Fix it solution only applies to 32-bit versions of Internet Explorer.

-Article ID: 947821 - Last Review: August 24, 2012 - Revision: 23.0 (Published on September 25, 2012)

System Update Readiness Tool fixes Windows Update errors in Windows 7, Windows Vista, Windows Server 2008 R2, and Windows Server 2008.

Resolutions:
To fix errors that occur when you use Windows Update, install and run the System Update Readiness Tool. The tool scans for inconsistencies on your computer and fixes them as it's being installed. Although it typically takes less than 15 minutes to run the scan, it might take much longer on some computers. Even if the progress bar seems to stop, the scan is still running, so don't cancel the process.
Infos:
http://support.microsoft.com/kb/947821/en-us


Direct download links:
x86:
System Update Readiness Tool for Windows 7 (KB947821) [September 2012]
x64:
System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821) [September 2012]

-Article ID: 2739286 - Last Review: October 15, 2012 - Revision: 1.0
An update that adds support for the new currency symbol of the Turkish Lira in Windows Vista, in Windows Server 2008, in Windows 7, and in Windows Server 2008 R2 is available.

Overview:
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.


Update for Windows 7 for x64-based Systems (KB2739286)

x32:
Update for Windows 7 (KB2739286)



***Update for x64 & x32 (direct download link):
-Article ID: 2757817 - Last Review: October 9, 2012 - Revision: 1.0
An update that adds support for Windows 8 and for Windows Server 2012 to Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 KMS hosts is available.

Introduction:
This update extends the Key Management Service (KMS) for Windows Vista, for Windows Server 2008, for Windows 7, and for Windows Server 2008 R2 to enable the enterprise licensing of Windows 8 and of Windows Server 2012.

KMS provides support for the following KMS client activations:

• Windows Server 2008 R2
• Windows Server 2008
• Windows 8
• Windows Server 2012
• Windows 7
• Windows Vista

KMS uses a KMS host key to activate itself on a KMS host and to establish a local activation service in your environment. This update extends support for KMS to provide activation for Windows 8 and for Windows Server 2012.


Update for Windows 7 for x64-based Systems (KB2757817)

x32:
Update for Windows 7 (KB2757817)



***Update for x64 & x32 (direct download link):
-Article ID: 2646886 - Last Review: May 14, 2012 - Revision: 2.0
FIX: Heap corruption occurs when a module calls the InsertEntityBody method in IIS 7.5

Symptoms:
Consider the following scenario:

• You create an HTTP module that calls the IHttpRequest::InsertEntityBody method to insert a new entity body into an existing HTTP request body.
• You register the module on a computer that is running Internet Information Services (IIS) 7.5, and then you enable the module.
• You restart the IIS service, and then a client request is made to a webpage that is hosted on the computer.

In this scenario, heap corruption occurs, and the module does not work.
Cause:
The issue occurs because of an access violation that occurs when the InsertEntityBody method tries to read the buffer from a freed memory location in the IIS service.


Update for Windows 7 for x64-based Systems (KB2646886)

x32:
Update for Windows 7 (KB2646886)

-Article ID: 2752161 - Last Review: November 16, 2012 - Revision: 1.0
Some Bulgarian characters are unavailable in the Trebuchet MS font in Windows 7 or in Windows Server 2008 R2.

Symptoms:
Some Bulgarian characters are not available in the Trebuchet MS font. This issue occurs on a computer that is running Windows 7 or Windows Server 2008 R2.
The following code points are missing in the Trebuchet MS font:

• U+040D
• U+045D

Note The Bulgarian language uses the Cyrillic alphabet.



Update for Windows 7 (KB2752161)

Install this update to resolve issues in Windows.

x32bits:
Download Update for Windows 7 (KB2752161) from Official Microsoft Download Center



Update for Windows 7 for x64-based Systems (KB2752161)

Install this update to resolve issues in Windows.

x64bits:
Download Update for Windows 7 for x64-based Systems (KB2752161) from Official Microsoft Download Center

-Article ID: 2670838 - Last Review: November 15, 2012 - Revision: 3.0
A platform update is available for Windows 7 SP1 and Windows Server 2008 R2 SP1.

Symptoms:

This article describes a platform update for Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1. This update improves the features and performance of the following components:

• Direct2D
• DirectWrite
• Direct3D
• Windows Imaging Component (WIC)
• Windows Advanced Rasterization Platform (WARP)
• Windows Animation Manager (WAM)
• XPS Document API
• H.264 Video Decoder
• JPEG XR codec

Infos:
A platform update is available for Windows 7 SP1 and Windows Server 2008 R2 SP1

Direct Download Links:
Download Platform Update for Windows 7 from Official Microsoft Download Center

Note: This update is included in the Internet Explorer 10 Release Preview.

REFRESHED PACKAGE: Version: 947821-v25, Date published: 11/26/2012



System Update Readiness Tool for Windows 7 (KB947821) [November 2012]

x32: http://www.microsoft.com/en-us/download/details.aspx?id=3132

x64: http://www.microsoft.com/en-us/downl....aspx?id=20858

I just got alerted to an off cycle update published yesterday (2012-11-27) - KB2762895.
I installed it without any errors.
Re-boot was not required, but i re-boot anyway...

Source: Application Compatibility Update for Windows Server 2008, Windows 7, and Windows Server 2008 R2: November 2012