Description: This critical security update resolves four privately reported vulnerabilities. The most serious security impact could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Update type: Critical

Release date: December 11, 2007

Applies to: All versions

Knowledge base: support.microsoft.com/kb/942615

Download link: 32-bit | 64-bit

Comments: The four vulnerabilities are:

• Uninitialized Memory Corruption Vulnerability - CVE-2007-3902
• Uninitialized Memory Corruption Vulnerability - CVE-2007-3903
• Uninitialized Memory Corruption Vulnerability - CVE-2007-5344
• DHTML Object Memory Corruption Vulnerability - CVE-2007-5347

Description: This critical security update resolves a privately reported vulnerability in Windows Media File Format. This vulnerability could allow remote code execution if a user viewed a specially crafted file in Windows Media Format Runtime. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Update type: Critical

Release date: December 11, 2007

Applies to: All versions

Knowledge base: support.microsoft.com/kb/941569

Download link: 32-bit | 64-bit

Comments:

Description: A security issue has been identified in ALPC that could allow an attacker to compromise your Windows-based system and gain control over it. This important security update resolves a privately reported vulnerability in the Windows kernel. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

Update type: Important

Release date: December 11, 2007

Applies to: All versions

Knowledge base: support.microsoft.com/kb/943078

Download link: 32-bit | 64-bit

Comments:

Description: This critical security update resolves two privately reported vulnerabilities in Microsoft DirectX. These vulnerabilities could allow code execution if a user opened a specially crafted file used for streaming media in DirectX. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Update type: Critical

Release date: December 11, 2007

Applies to: All versions

Knowledge base: support.microsoft.com/kb/941568

Download link: 32-bit | 64-bit

Comments:

Description: This important security update resolves a privately reported vulnerability in Server Message Block Version 2 (SMBv2). The vulnerability could allow an attacker to tamper with data transferred via SMBv2, which could allow remote code execution in domain configurations communicating with SMBv2.

Update type: Important

Release date: December 11, 2007

Applies to: All versions

Knowledge base: support.microsoft.com/kb/942624

Download link: 32-bit | 64-bit

Comments:

Microsoft will launch the final version of the server OS at a February 27th event in Los Angeles which the company is calling ‘Heroes Happen Here,’ . Also to be unveiled is Microsoft SQL Server 2008…

[Learn More]