Microsoft Security Bulletins - May 2007

In the Microsoft Security Bulletin Summary, the information below is provided on the updates for May, 2007.

Edit to add:

• The MSRC Blog post on these critical updates has now been published. With the critical updates, I didn't want to hold off this post for that release.

• The IEBlog published the reminder that IE security updates are cumulative and contain all previously released updates for each version of Internet Explorer.

Should you have difficulty with the updates, no-charge support is available at 1-866-PCSAFETY (1-866-727-2338). This number is available 24 hours a day for the U.S. and Canada for virus and other security-related support. For numbers outside the U.S. and Canada, please select your region and follow the instructions there.
Microsoft has provided information, about how you can help protect your computer system, at the following locations:

• Consumers can visit Security At Home, where this information is also available by clicking “Latest Security Updates”.

• IT Professionals can visit the TechNet Security Center

There are 7 Critical Updates:

• MS07-023 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (934233), Affected Software: Office.

• MS07-024 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232), Affected Software: Office.

• MS07-025 Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873), Affected Software: Office.

• MS07-026 Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (931832), Affected Software: Exchange.

• MS07-027 Cumulative Security Update for Internet Explorer (931768), Affected Software: Internet Explorer, including IE7 on Windows Vista

• MS07-028 Vulnerability in CAPICOM Could Allow Remote Code Execution (931906), Affected Software: CAPICOM, BizTalk.

• MS07-029 Vulnerability in RPC on Windows DNS Server Could Allow Remote Code Execution (935966), Affected Software: Windows
  
  Reminder: The MS07-029 security update will NOT undo any of the workarounds that may have been applied and will need to be undone.

Apple iPod Compatibility Update for Windows Vista

Nick White announced at the Windows Vista Team Blog that the final compatibility update is available for Windows Vista users of the Apple iPod.
The update is available at the Microsoft Download Center now and will be available via Windows Update on Tuesday 22 May 2007.

"The release is for users worldwide and works with the latest version of Apple iTunes to correct an issue that caused some iPods to become corrupted when ejecting them using Windows Explorer or the "Safely Remove Hardware" function in the System Tray.

The long and short of it is this: Apple and Windows have partnered together to ensure a great experience in using Windows Vista with iTunes and the iPod, and both companies recommend you download this update."

Remove Trojan Posing as Windows Product Activation

Just as I initially learned about the trojan posing as windows product activation last Friday from fellow MVP, Donna, when I was reading the post made yesterday at the Windows Genuine Advantage blog, I saw that Donna had located Removal Instructions for Trojan.Kardphisher at Symantec's blog.
Way to go, Donna! You have again reaffirmed why a few months ago I wrote: It is no wonder that Donna deserves to be in the spotlight.

Windows Vista Search

I started writing this the other day when Nick White posted the first segment in the Windows Vista Team Blog highlighting advanced searching in Windows Vista. Knowing he was going to add another part to the piece, I held off publishing.

Now that Part II has been posted, below is a brief synopsis of Putting advanced searches to work for you and Searching, part II: Using Search Folders along with additional links collected.

All links have been bookmarked in Features and Tutorials.
Search

• Explorers (Microsoft)
  In the new Explorers, the menus, toolbars, Navigation Pane, Task Pane, and Preview Pane have all merged into a single intuitive interface that's consistent across all of Windows Vista.

• Instant Search (Microsoft)
  Instant Search works from the Start menu, Explorers, Control Panel, and experiences, Windows Internet Explorer 7, Windows Photo Gallery, and even Windows Media Player.

• Operators to Help You to Create More Defined Searches (Advanced Search) (MSDN Blog)
  An exhaustive list of search operators. On Windows Vista you can use these operators to define a search, and then save it as a Search Folder (saved search).

• Using Search Folders (Advanced Search) (MSDN Blog)
  Examples of using Search Folders. Be sure to read the additional information in the comments.

• Windows Desktop Search: Advanced Query Reference for 3.x (Microsoft)
  Includes tables that describe the syntax to use with Windows Desktop Search 3.01 and 3.0, as well as the properties that can be queried for each category of file displayed in the desktop search results window.

IE7 Problems After May Security Update?

It was reported at the IEBlog that some people have experienced an unexpected “Save File” security dialog when they launch Internet Explorer. It appears that this happens if you have moved the “Temporary Internet Files” folder to a custom location and IE does not have appropriate access rights to the new folder location.
While the IE Team works to resolve the issue, use the workaround in Microsoft KB Article 937409, The "File Download – Security Warning" dialog box opens when you try to open Internet Explorer 7.

Windows Vista Security Blog Returns

Following a lengthy absence, Austin Wilson announced today that The Windows Vista Security Blog is Back with a promise for regular posting again. Also included was a link to the newly published whitepaper, Security Enhancements in Windows Vista™, described as including

information about security enhancements in Windows Vista and how Microsoft used the Security Development Lifecycle to increase the security of the Windows operating system.

Too much to handle right now? No problem. The references have been bookmarked for you to find later in Vista Security Features under "Security-Related Topics".

Now if some influence could be extended to the "Related Product Teams" linked there, we could see some real customer communication provided. Except the IEBlog Team which has been consistent, not much has been seen from these Microsoft Team blogs:

User Account Control, System Integrity Team, Anti-Malware Team, BitLocker™ Drive Encryption, SmartCard Infrastructure, Windows Authentication Team, Network Access Protection

Microsoft Security Advisory 947563 Released

Tweet This

This alert is to notify you that Microsoft has released Security Advisory 947563 – Vulnerability in Microsoft Excel Could Allow Remote Code Execution - on 15 January 2008.

Summary:

Microsoft is investigating new public reports of a vulnerability in Microsoft Office Excel 2003 Service Pack 2, Microsoft Office Excel Viewer 2003, Microsoft Office Excel 2002, Microsoft Office Excel 2000, and Microsoft Excel 2004 for Mac.

The initial investigation indicates that those who are using Microsoft Office Excel 2007 or Microsoft Excel 2008 for Mac, or who have installed Microsoft Office Excel 2003 Service Pack 3 are not affected by this vulnerability.

Microsoft is investigating the public reports and customer impact. Upon completion of this investigation, Microsoft will take the appropriate action to help provide appropriate protection. This may include providing a security update through the monthly release process or providing an out-of-cycle security update, depending on needs.

At this time, Microsoft is aware only of targeted attacks that attempt to use this vulnerability. Additionally, as the issue has not been publicly disclosed broadly, it is believed the risk at this time to be limited.

Recommendations:

Review Microsoft Security Advisory 947563 for an overview of the issue, details on affected components, mitigating factors, suggested actions, frequently asked questions (FAQ) and links to additional resources.

If you believe you are affected, contact Microsoft Customer Service and Support (CSS). Contact Microsoft Customer Service and Support (CSS) in North America for help with security update issues or viruses at no charge using the PC Safety line (1866-PCSAFETY). International customers can contact Customer Services and Support (CSS) by using any method found at this location: http://support.microsoft.com/security.