Donna's SecurityFlashPC & Internet Security BlogMicrosoft Security Bulletins MS08-039 & MS08-040 revisions- July 10, 2008 MS08-040 has been revised to remove erroneous references to SQL Server 2005 Service Pack 1 in the MBSA and SMS Detection and Deployment tables. Also clarified permissions requirements for vulnerability mitigating factors. MS08-039 was also revised by changing the information reference link for OWA Premium in the Mitigating Factors sections for both vulnerabilitieshttp://msmvps.com/blogs/donna/archive/2008/07/10/microsoft-security-bulletins-ms08-039-amp... Microsoft Security Advisory 954960 revision- July 10, 2008 Microsoft has revised their Security Advisory 954960 on Windows Server Update Services (WSUS) Blocked from Deploying Security Updates. July 9, 2008: Advisory updated to reflect availability of fix. More info at http:www.microsoft.comtechnetsecurityadvisory954960.mspx http:blogs.technet.commsrcarchive20080709update-microsoft-security-advisory-954960.aspxhttp://msmvps.com/blogs/donna/archive/2008/07/10/microsoft-security-advisory-954960-revisi... CheckPoint release a ZoneAlarm Security Advisory regarding their products and Microsoft Update KB951748- July 10, 2008 ZoneLabs released an advisory today regarding the above security update by Microsoft and their ZoneAlarm products at http:download.zonealarm.combinfreepressReleases2008LossOfInternetAccessIssue.html They will release a fix very soon as per their moderator: http:forum.zonelabs.orgzonelabsboardmessageboard.id=access&message.id=34074 via Calendar of Updates discussion forumshttp://msmvps.com/blogs/donna/archive/2008/07/10/checkpoint-release-a-zonealarm-security-a... Webroot founder goes missing, Family in search of missing millionaire- July 9, 2008 The founder of a Colorado-based software company has been missing in Hawaii for more than a week.http:starbulletin.com20080709newsstory06.html via Sunbelt Bloghttp://msmvps.com/blogs/donna/archive/2008/07/09/webroot-founder-goes-missing-family-in-se... Your computer's boot-time- July 9, 2008 I set-up a survey over at Calendar of Updates forum regarding the boot-time of user&39;s computer. My laptop&39;s boot-time as per Windows diagnostic is 61 seconds but the 3rd party utility, Boottimer reports 47 seconds. Running Vista Ultimate SP1 See or participate in the survey at http:www.dozleng.comupdatesindex.phpshowtopic=18788http://msmvps.com/blogs/donna/archive/2008/07/09/your-computer-s-boot-time.aspx Sun released v6 Update 7 of Java- July 9, 2008 Download locations: http:www.java.comendownloadindex.jsp http:java.sun.comjavasedownloadsindex.jsp Verify installation: http:www.java.comendownloadinstalled.jspdetect=jre&try=1 Release note at http:java.sun.comjavase6webnotesReleaseNotes.html Their blog got entries for security alerts again http:blogs.sun.comsecurity and solution is to update to this new version.http://msmvps.com/blogs/donna/archive/2008/07/09/sun-released-v6-update-7-of-java.aspx Adobe Security Bulletin: APSB08-16- July 9, 2008 Patch available for RoboHelp Server Cross-Site Scripting issue Release date: July 8, 2008Vulnerability identifier: APSB08-16CVE number: CVE-2008-2991Platform: WindowsAffected software versions:RoboHelp Server 6RoboHelp Server 7 A specially crafted URL could be used to create a cross-site scripting attack against RoboHelp Server 6 and RoboHelp Server 7. An attacker would need to have access to the RoboHelp Help Errors log, or convince someone with access to the RoboHelp Help Errors log to...http://msmvps.com/blogs/donna/archive/2008/07/09/adobe-security-bulletin-apsb08-16.aspx Microsoft Security Advisory on Office software- July 9, 2008 Microsoft Security Advisory (953635)Vulnerability in Microsoft Word Could Allow Remote Code Execution Microsoft is investigating new public reports of a possible vulnerability in Microsoft Office Word 2002 Service Pack 3. Our initial investigation indicates that customers who use all other supported versions of Microsoft Office Word, Microsoft Office Word Viewer, Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats, and Microsoft Office for Mac are not...http://msmvps.com/blogs/donna/archive/2008/07/09/microsoft-security-advisory-on-office-sof... Microsoft Security Bulletins for July 2008- July 8, 2008 As part of Microsofts routine, monthly security update cycle, they released 4 new security bulletins: MS08-037 - Vulnerabilities in DNS Could Allow Spoofing (953230) MS08-038 - Vulnerability in Windows Explorer Could Allow Remote Code Execution (950582) MS08-039 - Vulnerabilities in Outlook Web Access for Exchange Server Could Allow Elevation of Privilege (953747) MS08-040 - Vulnerabilities in Microsoft SQL Server Could Allow Elevation of Privilege (941203) You can view this...http://msmvps.com/blogs/donna/archive/2008/07/08/microsoft-security-bulletins-for-july-200... Adobe Product Improvement Program- July 7, 2008 I&39;ve been reading PDF files this past few days and then today, I got this: It&39;s Adobe Product Improvement Program and it is explained in http:www.adobe.commiscapipfaq.htmlIt&39;s like Microsoft Customer Experience Improvement Program that is in Vista, Live Messenger etc.http://msmvps.com/blogs/donna/archive/2008/07/07/adobe-product-improvement-program.aspx |