dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
4369
share rss forum feed


dp
Premium,MVM
join:2000-12-08
Greensburg, PA
kudos:7

4 recommendations

Microsoft Security Bulletin(s) for September 14, 2010

Note: There may be latency issues due to replication, if the page does not display keep refreshing

Today Microsoft released the following Security Bulletin(s).

Note: »www.microsoft.com/technet/security and »www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.

Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.

Bulletin Summary:

»www.microsoft.com/technet/securi···sep.mspx

Critical (4)

Microsoft Security Bulletin MS10-061
Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290)
»www.microsoft.com/technet/securi···061.mspx

Microsoft Security Bulletin MS10-062
Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)
»www.microsoft.com/technet/securi···062.mspx

Microsoft Security Bulletin MS10-063
Vulnerability in Unicode Scripts Processor Could Allow Remote Code Execution (2320113)
»www.microsoft.com/technet/securi···063.mspx

Microsoft Security Bulletin MS10-064
Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (2315011)
»www.microsoft.com/technet/securi···064.mspx

Important (5)

Microsoft Security Bulletin MS10-065
Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Remote Code Execution (2267960)
»www.microsoft.com/technet/securi···065.mspx

Microsoft Security Bulletin MS10-066
Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)
»www.microsoft.com/technet/securi···066.mspx

Microsoft Security Bulletin MS10-067
Vulnerability in WordPad Text Converters Could Allow Remote Code Execution (2259922)
»www.microsoft.com/technet/securi···067.mspx

Microsoft Security Bulletin MS10-068
Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)
»www.microsoft.com/technet/securi···068.mspx

Microsoft Security Bulletin MS10-069
Vulnerability in Windows Client/Server Runtime Subsystem Could Allow Elevation of Privilege (2121546)
»www.microsoft.com/technet/securi···069.mspx

Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.

If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety 1-866-727-2338. International customers should contact their local subsidiary.

As always, download the updates only from the vendors website - visit Windows Update and Office Update or Microsoft Update websites. You may also get the updates thru Automatic Updates functionality in Windows system.

Security Tool
Find out if you are missing important Microsoft product updates by using MBSA.
--
Microsoft® Security MVP, 2004 - 2010
DP's Security Bits



FFH
Premium
join:2002-03-03
Tavistock NJ
kudos:5

MS Update called out 4 patches for my Windows 7 Home Premium 32 bit systems. All applied without problems. Everything running well so far.

A reboot was needed.




NICK ADSL UK
Premium,MVM
join:2004-02-22
kudos:16
Reviews:
·Zen Internet

1 recommendation

reply to dp

Thanks don

TechNet Webcast: Information About Microsoft September Security Bulletins (Level 200)
Event ID: 1032454433


Language(s): English.
Product(s): Security.
Audience(s): IT Decision Maker,IT Generalist.

Duration: 90 Minutes
Start Date: Wednesday, September 15, 2010 11:00 AM Pacific Time (US & Canada)
Event Overview
Join us for a brief overview of the technical details of the September security bulletins. We intend to address your concerns in this webcast, therefore, most of the webcast is devoted to attendees asking questions about the bulletins and getting answers from Microsoft security experts.

Presenters: Jerry Bryant, Group Manager, Response Communications, Microsoft Corporation and Adrian Stone, Senior Security Program Manager Lead, Microsoft Corporation

Register now for the september security bulletin webcast.
--
Wilders Security Forum Admin
Microsoft MVP - Consumer Security



NICK ADSL UK
Premium,MVM
join:2004-02-22
kudos:16
Reviews:
·Zen Internet

2 recommendations

reply to dp

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

Version:3.11Date Published:9/14/2010

New Additions
We have added detection and cleaning capabilities for the following malicious software:

Stuxnet
»go.microsoft.com/fwlink/?LinkId=···/Stuxnet

CplLnk
»go.microsoft.com/fwlink/?LinkId=···2/CplLnk

Vobfus.A
»go.microsoft.com/fwlink/?LinkId=···us.gen!A

Vobfus.B
»go.microsoft.com/fwlink/?LinkId=···us.gen!B

Vobfus.C
»go.microsoft.com/fwlink/?LinkId=···us.gen!C

Vobfus!dll
»go.microsoft.com/fwlink/?LinkId=···bfus!dll

Worm:Win32/Sality.AU
»go.microsoft.com/fwlink/?LinkId=···ality.AU

Virus:Win32/Sality.AU
»go.microsoft.com/fwlink/?LinkId=···ality.AU

Trojan:WinNT/Sality
»go.microsoft.com/fwlink/?LinkId=···T/Sality

»www.microsoft.com/downloads/en/d···ylang=en
--
Wilders Security Forum Admin
Microsoft MVP - Consumer Security



antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4

1 recommendation

reply to dp

No problems on my Dell OEM 64-bit W7 HP and Acer OEM 64-bit Vista SP2 (IE7) machines so far.



MarkAW
Barry White
Premium
join:2001-08-27
Canada
kudos:16

1 recommendation

reply to dp

Thank dp See Profile and NICK ADSL UK See Profile all went well with my 3 Vista systems.
XP Pro systems have been converted to Linux so no Windows updates needed for them.


DrDemento

join:2005-07-25
Brick, NJ
reply to dp

Got the following for XP Pro machines-
KB975558, KB982802, KB2121546, KB2347290, KB890830, KB2141007, KB2259922, KB981322
Reboot required and all running smoothly so far.



siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico

1 recommendation

reply to dp

Thanks dp See Profile & NICK ADSL UK See Profile, all patched, reboot was required, we are cooking with gas.



La Luna
RIP Lisa
Premium
join:2001-07-12
Warwick, NY
kudos:3
reply to dp

Got my updates for Windows 7 64bit. All is well so far. Thanks dp See Profile and NICK ADSL UK See Profile.




owlyn
Premium,MVM
join:2004-06-05
Newtown, PA
reply to dp

12 Updates for work XP SP3, 11 for home XP SP3.



trparky
Apple... YUM
Premium,MVM
join:2000-05-24
Cleveland, OH
kudos:2
reply to dp

Got 8 updates on a Windows 7 Ultimate 64-bit machine.
--
Tom



Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
Reviews:
·TekSavvy DSL
·Shaw
·TELUS
reply to dp

Click for full size
8 ?


NICK ADSL UK
Premium,MVM
join:2004-02-22
kudos:16
Reviews:
·Zen Internet
reply to dp

September 2010 Security Release ISO Image

Quick Details
Version:
913086
Date Published:
9/13/2010

»www.microsoft.com/downloads/en/d···7e82ffed
--
Wilders Security Forum Admin
Microsoft MVP - Consumer Security



cork1958
Cork
Premium
join:2000-02-26
reply to dp

Got 7 updates on my Windows 7, 32 bit, with Office 2007 installed.

No problems here.

This must've been a last minute post, as I looked/searched for it a couple days ago and only found last months bulletin posted?
--
The Firefox alternative.
»www.mozilla.org/projects/seamonkey/



jabarnut
Light Years Away
Premium,MVM
join:2005-01-22
Galaxy M31
kudos:2
reply to dp

Thank you Don, and Nick! Appreciate the info.
Yikes...I'm a day late. Not usually like me. (Better a day late than never, I suppose).

All seems to have gone well here on 4 different machines.
Thanks again!
--
I had a life once.....now I have a Computer and a Modem.


Tuulilapsi
Kenosis

join:2002-07-29
Finland
reply to dp

I see some "issues" on an old XP box, but no problems on 7 (don't run Vista anymore).

MS10-064 for Outlook 2002 looks like it installs correctly, but the file versions are way off from those given in the file information here »support.microsoft.com/kb/2293422 For example, according to that file information table, Cdo.dll should be at version 5.5.2658.40, but it's version 5.5.2658.38 over on the system here. Another example is Emsui32.dll, which should be v 5.5.3188.0 according to that table, but is actually 10.0.6308.0 on my old XP box. Anyone else seen this?

Something else is going on, too. After automatic updates installed those patches, Windows Explorer lost file icons for files associated with Opera (HTML, MHT etc). The file association itself is intact, but the icons are the blank default icons normally given to files that aren't associated with any program.
--
Limited User Accounts.
Software Restriction Policies.


Libra
Premium
join:2003-08-06
USA
kudos:1
Reviews:
·Verizon FiOS
reply to La Luna

Click for full size
Updates for 9-15-10
Hi La Luna,

I had to install Word on my daughter's computer and it was more economical to purchase Office Professional Academic - I installed everything and notice that anyone updating MS Office doesn't show One Note or Outlook Social Connector. Are these unnecessary? - all I know is she needs Word. Here's my update list for Windows 7.

Thank you.

Sincerely, Libra

JRosenfeld

join:2005-06-06
UK
reply to dp

Some troubles here updating XPpro SP3 and Office XP. I don't use automatic updates,l but let Microsoft update scan the system. Of the 10 updates offered 5 installed, 5 failed to download. Tried a couple of times, then downloaded each manually and installed them from the hard drive. So I'm up to date, but what with reboots required after each manual install it took longer than I'd have wished.

Tuulilapi: cdo.dll updated to 5.5.2658.40 here. Emsui32.dll is also v 10.0.6308.0. It's either a misprint on the bulletin or that update did not apply to Office XP.



Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
Reviews:
·TekSavvy DSL
·Shaw
·TELUS
reply to dp

How do I get rid of these Suggested Sites on my favorites bar?

1 of these updates is peeing me off.


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico

said by Cartel:

How do I get rid of these Suggested Sites on my favorites bar?

1 of these updates is peeing me off.
Right-click, delete button.
--
siljaline

Here at Mountain View Chocolate, we’re committed to transparency and choice


Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
Reviews:
·TekSavvy DSL
·Shaw
·TELUS
reply to Cartel

said by Cartel:

How do I get rid of these Suggested Sites on my favorites bar?

1 of these updates is peeing me off.
My bad it was registry mechanic.
--
ASUS M4A79 Deluxe (BIOS 2708) AMD Phenom II X4 940 OCZ PC8500 Platinum 4GB Sapphire HD4870 1GB 256-bit GDDR5 HT Omega Claro Windows 7 x64 ADSL 6Mbps APC Back UPS 900VA


altermatt
Premium
join:2004-01-22
White Plains, NY
Reviews:
·Verizon FiOS
reply to JRosenfeld

said by JRosenfeld:

Some troubles here updating XPpro SP3 and Office XP.
Uh, oh. Was going to run the updates this morning but then saw this. Anyone else on XPPro sp3 have problems? Just don't want to get in a situation where I have to leave for a meeting and I'm still in the middle of a fudged update!
--
The truth of a thing is the feel of it, not the think of it. -- Stanley Kubrick

Fickey
Terrorists target your backbone

join:2004-05-31

No troubles noticed here with XP sp3 & Office 2007 Pro.



altermatt
Premium
join:2004-01-22
White Plains, NY
Reviews:
·Verizon FiOS

Thanks, Fickey. When I didn't get any bites here, I went ahead and took a chance. Short story: Everything ok. Longer story: updates seemed to go fine, rebooted, and Windows wouldn't start. Put on my beanie hat and turned off the computer, turned it on, and everything rebooted fine.

I'm getting too old for this.
--
The truth of a thing is the feel of it, not the think of it. -- Stanley Kubrick



no__1__here
Premium
join:2003-10-13
Tomball, TX
reply to dp

I had trouble on a XP SP3 machine. My wife called me at work to say she couldn't access the network. Did the normal over-the-phone checks, and then ended up just asking her to reboot. But she still had no network. Odd. When I got home last night I noticed that device manager said the NIC was hosed, so after a bit I decided to just uninstall the two obviously network-related updates. However, they each complained about the other updates so I ended up removing all of them. Rebooted and the NIC remained hosed! I then re-applied the updates and rebooted once more. Still no NIC, but luckily I had the driver package local so I reinstalled it, and after one more reboot the NIC was "back".

I don't know what happened since I was not there when the updates were applied, and the logs don't indicate a problem with the NIC driver. Anywho, her machine is up-to-date and back online.

P.S. Yes, I know in hind sight that I should have tried re-installing the NIC drivers first.
--
COL 2:8

"Relativism just isn't true for me." - Hillary Putnam


Tuulilapsi
Kenosis

join:2002-07-29
Finland
reply to JRosenfeld

said by JRosenfeld:

Tuulilapi: cdo.dll updated to 5.5.2658.40 here. Emsui32.dll is also v 10.0.6308.0. It's either a misprint on the bulletin or that update did not apply to Office XP.
The bulletin appears to have been updated with new version numbers. »support.microsoft.com/kb/2293422 Looking better this time, and seem to fit mine on a first glance.
--
Limited User Accounts.
Software Restriction Policies.