Microsoft Security Bulletin Advance Notification for April 2012

ronjor · Apr 5, 2012

Published: Thursday, April 05, 2012

Version: 1.0

This is an advance notification of security bulletins that Microsoft is intending to release on April 10, 2012.

This bulletin advance notification will be replaced with the April bulletin summary on April 10, 2012. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications.

Microsoft will host a webcast to address customer questions on the security bulletins on April 11, 2012, at 11:00 AM Pacific Time (US & Canada). Register now for the April Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Click to expand...

https://technet.microsoft.com/en-us/security/bulletin/ms12-apr

Note: See Executive Summaries in the bulletin.

ronjor · Apr 5, 2012

Hello,

Today we’re releasing our advance notification for the April security bulletin release, which is scheduled for Tuesday, April 10. This month’s release includes 6 bulletins addressing 11 vulnerabilities in Microsoft Windows, Microsoft Office, Internet Explorer, Forefront UAG, and .NET Framework. All 6 bulletins will be released on Tuesday, April 10 at approximately 10 a.m. PDT. Revisit this blog on Tuesday for our official risk and impact analysis, along with deployment guidance and a video overview of the release.
Click to expand...

https://blogs.technet.com/b/msrc/ar...ecurity-bulletin-release.aspx?Redirected=true

ronjor · Apr 10, 2012

Microsoft Security Bulletin Summary for April 2012

Published: Tuesday, April 10, 2012

Version: 1.0

This bulletin summary lists security bulletins released for April 2012.

With the release of the security bulletins for April 2012, this bulletin summary replaces the bulletin advance notification originally issued April 5, 2012. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

For information about how to receive automatic notifications whenever Microsoft security bulletins are issued, visit Microsoft Technical Security Notifications.

Microsoft is hosting a webcast to address customer questions on these bulletins on April 11, 2012, at 11:00 AM Pacific Time (US & Canada). Register now for the April Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Click to expand...

https://technet.microsoft.com/en-us/security/bulletin/ms12-apr

ronjor · Apr 10, 2012

Windows XP and Office 2003 countdown to end of support, and the April 2012 bulletins

by MSRCTeam

Hello,

As you know, today is Update Tuesday. Before I go into the bulletin details, however, I wanted to let you know that today we’re notifying customers that Windows XP and Office 2003 will go out of support in April 2014. We understand that preparing to deploy the latest versions of Windows and Office may take time for some organizations, and we encourage all customers to upgrade to the latest operating system to help protect your systems.

Now, on to the updates. If you’re running Automatic Updates you’re automatically protected from the issues addressed this month, and for those of you who test and deploy your updates, we’ve offered some details and guidance below.

As I previously mentioned in the Advance Notification Service blog post on Thursday, today we are releasing six security bulletins, four of which are rated Critical in severity, and two Important.

These bulletins will increase protection by addressing 11 CVEs. Customers should plan to install all of these updates as soon as possible. For those who must prioritize deployment, we recommend focusing first on these Critical updates:

MS12-027 (Windows Common Controls): This security update resolves a CVE in the MSCOMCTL.OCX ActiveX control, which could allow remote code execution if a user visits a website containing specially crafted content designed to exploit the vulnerability.

MS12-023 (Internet Explorer): This security update resolves five CVEs in Internet Explorer, which could allow a third party to gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Click to expand...

https://blogs.technet.com/b/msrc/?Redirected=true

moontan · Apr 10, 2012

tnx ronjor!

just checked my Windows Updates and they are indeed ready.

ronjor · Apr 10, 2012

A lot of megabytes are in this update.

ronjor · Apr 10, 2012

Assessing risk for the April 2012 security updates

Today we released 6 security bulletins. Four have a maximum severity rating of Critical with the other two addressing Important class vulnerabilities. We hope that the table below helps you prioritize the deployment of the updates appropriately for your environment.
Click to expand...

vasa1 · Apr 11, 2012

MS12-027 (Windows Common Controls): This security update resolves a CVE in the MSCOMCTL.OCX ActiveX control, which could allow remote code execution if a user visits a website containing specially crafted content designed to exploit the vulnerability.
Click to expand...

Is it just on visiting those websites or even "Hackers are already using the vulnerability in malformed text documents, which when opened either in Word or WordPad" Source

ronjor · Apr 14, 2012

Printing issue with MS12-025 update

Known issues with this security update

We are currently aware of an issue with printing from a Windows Forms application. After the installation of these security updates, certain Windows Forms applications may not print, or may not honor specified printer settings when they do print. There is no impact on systems that do not use printing functionality from a .NET Framework Windows Forms application. The investigation into this issue is ongoing.

Workaround

To print from an affected Windows Forms application, print the content to a file on your computer instead of directly printing to a printer device. For example, print to a PDF, XPS, or any other supported format file. You can then open the file that you created and print directly from there.
Click to expand...

http://support.microsoft.com/kb/2671605

Log in or Sign up

Microsoft Security Bulletin Advance Notification for April 2012

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

moontan Registered Member

ronjor Global Moderator

ronjor Global Moderator

vasa1 Registered Member

ronjor Global Moderator

Log in or Sign up

Microsoft Security Bulletin Advance Notification for April 2012

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

moontan Registered Member

ronjor Global Moderator

ronjor Global Moderator

vasa1 Registered Member

ronjor Global Moderator

Useful Searches