Microsoft Security Bulletin Advance Notification for February 2011

[brianzion]

This is an advance notification of security bulletins that
Microsoft is intending to release on February 8, 2011.

Microsoft Security Bulletin Advance Notification for February 2011

 

[Lee]

Thanks.

 

[whs]

Upcoming Patch Tuesday

As part of this month’s Patch Tuesday schedule, Microsoft plans to ship a dozen bulletins with fixes for 22 vulnerabilities, some serious enough to allow hackers complete access to a vulnerable Windows machine.

more

 

[Phone Man]

I followed the OP's link and under Non-Security I went to this link.

Description of Software Update Services and Windows Server Update Services changes in content for 2011 and then Bing gave me this when I looked for one of the updates. KB2487426



MS probably wont post the KB articles until Feb 8 so will have to wait for the official information. Maybe SP1 has not been released because of some install problems.

Jim

 

[brianzion]

I followed the OP's link and under Non-Security I went to this link.

Description of Software Update Services and Windows Server Update Services changes in content for 2011 and then Bing gave me this when I looked for one of the updates. KB2487426

View attachment 136527

MS probably wont post the KB articles until Feb 8 so will have to wait for the official information. Maybe SP1 has not been released because of some install problems.

Jim

well spotted and posted

 

[NoN]

I followed the OP's link and under Non-Security I went to this link.

Description of Software Update Services and Windows Server Update Services changes in content for 2011 and then Bing gave me this when I looked for one of the updates. KB2487426

View attachment 136527

MS probably wont post the KB articles until Feb 8 so will have to wait for the official information. Maybe SP1 has not been released because of some install problems.

Jim

Thought about that..that's also maybe why they putted a new flavor of the kb2454826.
Download details: Update for Windows 7 for x64-based Systems (KB2454826)

 

[HammerHead]

Updates?

I am wondering about up dates vs SP1. I have loaded SP1 and since the only updates I am getting are the ones for MSE. Will the rigs with SP1 be getting the updates or are they not available?

 

[Zardoc]

I bet that issue has to do with the frequent number of installs that refuse because of a patched Winmail.

 

[Buddahfan]

Information Week's Article on the Feb Security Fixes

Microsoft To Patch Three Zero Day Vulnerabilities

Tuesday will bring 22 fixes from Microsoft, as well as Adobe patches for Acrobat and Reader.

By Mathew J. Schwartz , InformationWeek
February 7, 2011 10:54 AM

​

Microsoft's February Patch Tuesday will see the release this week of 12 security bulletins, patching a total of 22 vulnerabilities, including three that could be exploited via zero-day attacks.

According to Wolfgang Kandek, CTO of Qualys, "these vulnerabilities have seen limited exploits in the wild, so applying the update is highly recommended."

One of those bugs, a CSS-related vulnerability that affects all versions of Internet Explorer, was disclosed in late 2010 by a Google researcher. By early January, security firms reported that attackers were actively exploiting the bug.

Microsoft will also patch a zero-day vulnerability in the Windows Graphics Rendering Engine. Attackers could exploit the flaw using malicious thumbnail images, and execute arbitrary code at the user's permission level.

The third zero-day vulnerability to be patched is an FTP service bug, first acknowledged in December 2010, that affects Internet Information Service (IIS) 7.0 and 7.5, although not IIS Web Services. While attackers could exploit this vulnerability to create a denial of service, Microsoft said it was unlikely they could remotely execute code. Also, most organizations that use IIS likely won't be vulnerable, since IIS FTP service is not installed by default, and even when installed, not enabled by default.

Two zero-day exploits currently targeting Microsoft products, however, won't be addressed in Tuesday's security update. Notably, a recently disclosed vulnerability in MHTML affects all versions of Windows. Microsoft acknowledged the bug 10 days ago and released a temporary workaround while it develops a permanent fix.

complete article on link above

 

[fastfade]

I bet that issue has to do with the frequent number of installs that refuse because of a patched Winmail.

Since my Win 7 pro clean/install using SP-1 on Feb. 1, I've only received updates for WSE. I too use Windows Mail workaround. None of todays MS Updates are available to me.

Prior to my recent clean/install using SP-1, I received all MS updates just fine. I been using the Windows Mail workaround for a long time.

Thanks for any suggustions

 

[andyparks]

is 22 updates coming to day

 

[fastfade]

Just checked again - nothing except update for WSE def update.

 

[brianzion]

in the united kingdom i get the windows updates between 4pm - 8pm GMT TIME on Tuesdays.

 

[fastfade]

Mine usually showup 1st thing early morning on Tuesday or day of release.

 

[fastfade]

perhaps this will clear with official release of sp-1.

 

[NICK ADSL UK]

Microsoft Security Bulletin Summary for February 8 2011

Microsoft Security Bulletin Summary for February 8 2011
Microsoft Security Bulletin Summary for February 8 2011
Published: February 8 2011
Note: There may be latency issues due to replication, if the page does not display keep refreshing

Note: Security Center - Bulletins Advisories Tools Guidance Resources and Microsoft Safety & Security Center are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the Microsoft.com download center or Windows Update. See the individual bulletins for details.
Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.

Today Microsoft released the following Security Bulletin(s).

Bulletin Summary:
Microsoft Security Bulletin Summary for February 2011
Critical (3)
Microsoft Security Bulletin MS11-003
Cumulative Security Update for Internet Explorer (2482017)
Microsoft Security Bulletin MS11-003 - Critical: Cumulative Security Update for Internet Explorer (2482017)
Microsoft Security Bulletin MS11-006
Vulnerability in Windows Shell Graphics Processing Could Allow Remote Code Execution (2483185)
Microsoft Security Bulletin MS11-006 - Critical: Vulnerability in Windows Shell Graphics Processing Could Allow Remote Code Execution (2483185)
Microsoft Security Bulletin MS11-007
Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Remote Code Execution (2485376)
Microsoft Security Bulletin MS11-007 - Critical: Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Remote Code Execution (2485376)


important (9)
Microsoft Security Bulletin MS11-004
Vulnerability in Internet Information Services (IIS) FTP Service Could Allow Remote Code Execution (2489256)
Microsoft Security Bulletin MS11-004 - Important: Vulnerability in Internet Information Services (IIS) FTP Service Could Allow Remote Code Execution (2489256)
Microsoft Security Bulletin MS11-005
Vulnerability in Active Directory Could Allow Denial of Service (2478953)
Microsoft Security Bulletin MS11-005 - Important: Vulnerability in Active Directory Could Allow Denial of Service (2478953)
Microsoft Security Bulletin MS11-008
Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2451879)
Microsoft Security Bulletin MS11-008 - Important: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2451879)
Microsoft Security Bulletin MS11-009
Vulnerability in JScript and VBScript Scripting Engines Could Allow Information Disclosure (2475792)
Microsoft Security Bulletin MS11-009 - Important: Vulnerability in JScript and VBScript Scripting Engines Could Allow Information Disclosure (2475792)
Microsoft Security Bulletin MS11-010
Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2476687)
Microsoft Security Bulletin MS11-010 - Important: Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2476687)
Microsoft Security Bulletin MS11-011
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2393802)
Microsoft Security Bulletin MS11-011 - Important: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2393802)
Microsoft Security Bulletin MS11-012
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2479628)
Microsoft Security Bulletin MS11-012 - Important: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2479628)
Microsoft Security Bulletin MS11-013
Vulnerabilities in Kerberos Could Allow Elevation of Privilege (2496930)
Microsoft Security Bulletin MS11-013 - Important: Vulnerabilities in Kerberos Could Allow Elevation of Privilege (2496930)
Microsoft Security Bulletin MS11-014
Vulnerability in Local Security Authority Subsystem Service Could Allow Local Elevation of Privilege (2478960)
Microsoft Security Bulletin MS11-014 - Important: Vulnerability in Local Security Authority Subsystem Service Could Allow Local Elevation of Privilege (2478960)


Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.
If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety 1-866-727-2338. International customers should contact their local subsidiary.
As always, download the updates only from the vendors website - visit Windows Update and Office Update or Microsoft Update websites. You may also get the updates thru Automatic Updates functionality in Windows system.
Security Tool
Find out if you are missing important Microsoft product updates by using MBSA.

 

[sablegsd]

I just checked and I'm getting 10 updates. Is there supposed to me more? I am using IE9.

 

[Marrrcus]

well i have a serious issue with my pc
i only get 1 update, and this happend to me even last time microsoft released a MAJOR updates but i only got 1 update last time, few weeks ago also,
plz anyone? what's the issue ?

 

[kristalsoldier]

I am downloading 10 updates too and I am also using IE9.

 

[brianzion]

Microsoft Security Bulletin Summary for February 2011

just getting mine now 10 updates