Technet Security Bulletin Webcast August 10, 2006

1
(No Transcript)
2
Technet Security Bulletin Webcast August 10,
2006

• Microsoft BV
• Sasa Radosevic
• Security Technical Specialist

3
Agenda

• Security Bulletin process recap.
• Review of August Releases
• New Security Bulletins
• Revised Security Bulletins
• High-Priority Non-Security Updates
• Latest Advisories
• Other Security Resources
• Windows Malicious Software Removal Tool
• New information resources
• Resources

4
Bulletin Severity Ratings
Exploitation could allow the propagation of an
Internet worm without user action
Critical
Exploitation could result in compromise of the
confidentiality, integrity, or availability of
user data, or of the integrity or availability of
processing resources
Important

• Exploitability is mitigated to a significant
  degree by factors such as default configuration,
  auditing, or difficulty of exploitation

Moderate
Exploitation is extremely difficult, or whose
impact is minimal
Low
More information www.microsoft.com/technet/securi
ty/bulletin/rating.mspx
5
MS06-040 Vulnerability in Server Service Could
Allow Remote Code Execution (921883) - Critical
6
MS06-041 Vulnerability in DNS Resolution Could
Allow Remote Code Execution (920683) - Critical
7
MS06-042 Cumulative Security Update for
Internet Explorer Critical
8
MS06-042 Cumulative Security Update for
Internet Explorer Critical
9
MS06-043 Vulnerability in Microsoft Windows
Could Allow Remote Code Execution (920214) -
Critical
10
MS06-044 Vulnerability in Microsoft Management
Console Could Allow Remote Code Execution
(917008) - Critical
11
MS06-045 Vulnerability in Windows Explorer
Could Allow Remote Code Execution (921398) -
Important
12
MS06-046 Vulnerability in HTML Help Could Allow
Remote Code Execution (922616) - Critical
13
MS06-047 Vulnerability in Microsoft Visual
Basic for Applications Could Allow Remote Code
Execution (921645) Critical
14
MS06-048 Vulnerability in Microsoft Office
Could Allow Remote Code Execution (922968)
Critical
15
MS06-049 Vulnerability in Windows Kernel Could
Result in Elevation of Privilege (920958) -
Important
16
MS06-050 Vulnerability in Microsoft Windows
Hyperlink Object Library Could Allow Remote Code
Execution (920670) - Important
17
MS06-051 Vulnerability in Windows Kernel Could
Result in Remote Code Execution (917422) -
Critical
18
MS05-004 ASP.NET Path Validation Vulnerability
(887219) Re-release
19
August 2006 Security BulletinsAdditional Risk
Information
20
Resources

• Security Bulletins Summaryhttp//www.microsoft.co
  m/netherlands/technet/security/bulletins/ms06-jun.
  mspx
• Security Bulletins Searchwww.microsoft.com/techne
  t/security/current.aspx
• Security Advisorieswww.microsoft.com/technet/secu
  rity/advisory/
• MSRC Bloghttp//blogs.technet.com/msrc
• Notificationswww.microsoft.com/technet/security/b
  ulletin/notify.mspx
• TechNet Radiowww.microsoft.com/tnradio
• SearchSecurity Columnhttp//searchsecurity.techta
  rget.com/news/0,289141,sid14,00.html
• 10 Principles of Microsoft Patch
  Managementwww.microsoft.com/technet/community/col
  umns/secmgmt/sm0506.mspx
• IT Pro Security Newsletterwww.microsoft.com/techn
  et/security/secnews/
• TechNet Security Centerwww.microsoft.com/technet/
  security

21
(No Transcript)