Microsoft Security Bulletin Advance Notification for July 2009

[ronjor]

Published: July 09, 2009

Microsoft Security Bulletin Advance Notification issued: July 9, 2009

Microsoft Security Bulletins to be issued: July 14, 2009

This is an advance notification of security bulletins that Microsoft is intending to release on July 14, 2009.

This bulletin advance notification will be replaced with the July bulletin summary on July 14, 2009. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications.

Microsoft will host a webcast to address customer questions on these bulletins on July 15, 2009, at 11:00 AM Pacific Time (US & Canada). Register now for the July Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts

Microsoft

[ronjor]

The Microsoft Security Response Center (MSRC)

Advance Notification for the July 2009 Security Bulletin Release

Our Advance Notification was published today and indicates that next Tuesday, July 14 at 10:00 a.m. PDT (UTC -8 ), we will be releasing a total of 6 security bulletins consisting of:

· Three Critical updates affecting Windows.

· One Important update affecting Publisher.

· One Important update affecting Internet Security and Acceleration (ISA) Server.

· One Important update affecting Virtual PC and Virtual Server.

I want to provide some clarity on two of the pending Windows updates mentioned. First, we will be addressing the issue discussed in Security Advisory 971778 concerning a vulnerability in DirectShow. As noted in the advisory, we are aware of limited active attacks and we have been working aggressively to get a quality update shipped to customers.

Second, our engineering teams have been working around the clock to produce an update for the issue discussed in Security Advisory 972890 (vulnerability in the Microsoft Video ActiveX Control) and we believe that they will be able to release an update of appropriate quality for broad distribution that protects against the attacks we detailed in the advisory and in an MSRC blog post by Christopher Budd. In the mean time, we encourage customers to continue to enable the workaround by running the “Microsoft Fix it” solution in the associated knowledge base article (KB972890).

Microsoft