十二月份资安全公告Dec.pptVIP

TechNet TNT1-16 十二月份資訊安全公告Dec 14, 2006 Richard Chen 陳政鋒(Net+, Sec+, MCSE2003+Security, CISSP)資深技術支援工程師台灣微軟技術支援處 Questions and Answers Submit text questions using the “Ask a Question” button What We Will Cover Recap Nov. releases known issues Review Dec. releases Other security resources Prepare for new WSUSSCAN.CAB architecture IE 7 over AU Lifecycle Information Windows Malicious Software Removal Tool Resources Questions and answers Recap Nov. Known issues and MS06-066 Netware Get offering even no CSNW is installed: Normal proactive patching MS06-067 IE patch 3rd party AP compatibility issue, see KB922760 MS06-069 Adobe Flash Player Re-offering, install the latest Flash Player to solve the issue MS06-070 Workstation service Worm vulnerability, install the patch immediately MS06-071 MSXML WSUS category/description error, fixing now. MSXML4 install failure, see KB927978 Dec 2006 Security BulletinsSummary On Dec 13: 7 New Security Bulletins 5 Windows (1 critical, 4 important) 1 Visual Studio (critical) 1 Media Player (critical) 1 re-release MS06-059 (critical) 5 High-priority non-security updates MS06-076: Outlook Express- Important MS06-076: Outlook Express- Important Re-Release of MS06-059- Excel Critical Install MS06-059 might fail if ALL conditions are true: Running Excel 2002 MSI 2.0 Previously installed MS06-037 Details: Basically, because the 059 patch does not contain the MSI 2.0 patch code for 037, installing Excel 2002’s 059 on top of 037 will trigger a Windows Installer 2.0 bug in some cases result in excel.exe not getting updated to version 6816. Resolution: Install MS06-059 v2 Windows Malicious Software Removal Tool – KB890830 Twenty-fourth monthly incremental update. The Oct update adds the ability to remove: Win32/Beenut Available as priority update through Windows Update or Microsoft Update for Windows XP users Offered th