Jubo's blog

On September 13th Microsoft released 5 security updates and they’re all rated as “Important”.

Important:

• MS11-070 – Vulnerability in WINS Could Allow Elevation of Privilege (2571621)
• MS11-071 – Vulnerability in Windows Components Could Allow Remote Code Execution (2570947)
• MS11-072 – Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2587505)
• MS11-073 – Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2587634)
• MS11-074 – Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2451858)

A more technical version of the Security Bulletin can be found at Microsoft TechNet and an end-user version is available at Microsoft’s Safety & Security Center website.

Check for updates at Microsoft Update.

See also the MSRC blog: More on DigiNotar Certificates, and September Bulletins

More information is available at the website of Microsoft Security Response Center.

Once again from the desk of one of my favorite Starbucks store..

Last Tuesday Microsoft released 13 security bulletins. Two of them are rated as “critical”, 9 rated as “important” and 2 rated as “moderate”. Check if your computer has the updates or check with Microsoft Update. Here’s a list of the updates:

Critical:

• MS11-057 – Cumulative Security Update for Internet Explorer (2559049)
• MS11-058 – Vulnerabilities in DNS Server Could Allow Remote Code Execution (2562485)

Important:

• MS11-059 – Vulnerability in Data Access Components Could Allow Remote Code Execution (2560656)
• MS11-060 – Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2560978)
• MS11-061 – Vulnerability in Remote Desktop Web Access Could Allow Elevation of Privilege (2546250)
• MS11-062 – Vulnerability in Remote Access Service NDISTAPI Driver Could Allow Elevation of Privilege (2566454)
• MS11-063 – Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2567680)
• MS11-064 – Vulnerabilities in TCP/IP Stack Could Allow Denial of Service (2563894)
• MS11-065 – Vulnerability in Remote Desktop Protocol Could Allow Denial of Service (2570222)
• MS11-066 – Vulnerability in Microsoft Chart Control Could Allow Information Disclosure (2567943)
• MS11-067 – Vulnerability in Microsoft Report Viewer Could Allow Information Disclosure (2578230)

Moderate:

• MS11-068 – Vulnerability in Windows Kernel Could Allow Denial of Service (2556532)
• MS11-069 – Vulnerability in .NET Framework Could Allow Information Disclosure (2567951)

A more technical version of the Security Bulletin can be found at Microsoft TechNet and an end-user version is available at Microsoft’s Safety & Security Center website.

See also the MSRC blog: A live BlueHat Prize webcast and the August 2011 security updates

More information is available at the website of Microsoft Security Response Center.

From the desk of the Art Resource Center at the Tacoma Art Museum. If you’re in the area then visit the museum! In the same area you’ll also find the Museum of Glass and the Washington State History Museum.

Have a wonderful day!

Yesterday Microsoft released 16 security updates, 9 are rated as “critical” and 7 are rated as “important”. Check if your computer has the updates or check with Microsoft Update. Here’s a list of the updates:

Critical:

• MS11-038 – Vulnerability in OLE Automation Could Allow Remote Code Execution (2476490)
• MS11-039 – Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2514842)
• MS11-040 – Vulnerability in Threat Management Gateway Firewall Client Could Allow Remote Code Execution (2520426)
• MS11-041 – Vulnerability in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2525694)
• MS11-042 – Vulnerabilities in Distributed File System Could Allow Remote Code Execution (2535512)
• MS11-043 – Vulnerability in SMB Client Could Allow Remote Code Execution (2536276)
• MS11-044 – Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814)
• MS11-050 – Cumulative Security Update for Internet Explorer (2530548)
• MS11-052 – Vulnerability in Vector Markup Language Could Allow Remote Code Execution (2544521)

Important:

• MS11-037 – Vulnerability in MHTML Could Allow Information Disclosure (2544893)
• MS11-045 – Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146)
• MS11-046 – Vulnerability in Ancillary Function Driver Could Allow Elevation of Privilege (2503665)
• MS11-047 – Vulnerability in Hyper-V Could Allow Denial of Service (2525835)
• MS11-048 – Vulnerability in SMB Server Could Allow Denial of Service (2536275)
• MS11-049 – Vulnerability in the Microsoft XML Editor Could Allow Information Disclosure (2543893)
• MS11-051 – Vulnerability in Active Directory Certificate Services Web Enrollment Could Allow Elevation of Privilege (2518295)

A more technical version of the Security Bulletin can be found at Microsoft TechNet  and an end-user version is available at Microsoft’s Safety & Security Center website.

See also the MSRC blog: Autorun-Related Malware Declines and the June 2011 Security Bulletin Release

More information is available at the website of Microsoft Security Response Center.

This time not from one of my favorite Starbucks, but from home because of a broken ankle… ;(

Have a wonderful day!

On June 14th, 2011 Microsoft will release 16 new security bulletins: http://bit.ly/k2Z1zF

It’s already more than a week ago since Microsoft released their security bulletin for April. If you haven’t update your version of Windows yet then move that mouse pointer and check with Microsoft Update. Last week Microsoft released 17 security bulletins, nine of which are rated as “critical” and eight rated as “important”. So, there’s a good reason to check if you’re up-to-date with the latest patches and updates.

Critical:

• MS11-018 -Cumulative Security Update for Internet Explorer (2497640)
• MS11-019 – Vulnerabilities in SMB Client Could Allow Remote Code Execution (2511455)
• MS11-020 – Vulnerability in SMB Server Could Allow Remote Code Execution (2508429)
• MS11-027 – Cumulative Security Update of ActiveX Kill Bits (2508272)
• MS11-028 – Vulnerability in .NET Framework Could Allow Remote Code Execution (2484015)
• MS11-029 – Vulnerability in GDI+ Could Allow Remote Code Execution (2489979)
• MS11-030 – Vulnerability in DNS Resolution Could Allow Remote Code Execution (2509553)
• MS11-031 – Vulnerability in JScript and VBScript Scripting Engines Could Allow Remote Code Execution (2514666)
• MS11-032 – Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Remote Code Execution (2507618)

Important:

• MS11-021 – Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279)
• MS11-022 – Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2489283)
• MS11-023 – Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489293)
• MS11-024 – Vulnerability in Windows Fax Cover Page Editor Could Allow Remote Code Execution (2527308)
• MS11-025 – Vulnerability in Microsoft Foundation Class (MFC) Library Could Allow Remote Code Execution (2500212)
• MS11-026 – Vulnerability in MHTML Could Allow Information Disclosure (2503658)
• MS11-033 – Vulnerability in WordPad Text Converters Could Allow Remote Code Execution (2485663)
• MS11-034 – Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2506223)

A more technical version of the Security Bulletin can be found at Microsoft TechNet  and an end-user version is available at Microsoft’s Safety & Security Center website.

See also the MSRC blog: April 2011 Security Bulletin Release

More information is available at the website of Microsoft Security Response Center.

Do you need a good anti-virus/anti-malware program and you don’t want to pay much for it? Then check out Microsoft Security Essentials. Great program and the price is $0.00!

From a desk in a Starbucks in Lakewood. Coffee is great and the barista’s are awesome!

Have a wonderful day!

Yesterday Microsoft released three security bulletins addressing four vulnerabilities in Windows and Office. One bulletin is rated as “critical” and the other two as “important”.

Critical:

• MS11-015 – Vulnerabilities in Windows Media Could Allow Remote Code Execution (2510030)

Important:

• MS11-017 – Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (2508062)
• MS11-016 – Vulnerability in Microsoft Groove Could Allow Remote Code Execution (2494047)

A more technical version of the Security Bulletin can be found at Microsoft TechNet  and an end-user version is available at Microsoft’s Security website.

See also the MSRC blog: March 2011 Security Bulletin Release

More information is available at the website of Microsoft Security Response Center.

Don’t forget, if you need anti-virus/antimalware software you can always download Microsoft Security Essentials.

Be safe and update your computer with the latest updates and/or patches. From a rainy, rainy, rainy Starbucks in Lakewood, WA. Have a wonderful, and hopefully sunny, day!