Microsoft Security Bulletin Advance Notification for February 2011

ronjor · Feb 3, 2011

Published: February 03, 2011

Microsoft Security Bulletin Advance Notification issued: February 3, 2011
Microsoft Security Bulletins to be issued: February 8, 2011

This is an advance notification of security bulletins that Microsoft is intending to release on February 8, 2011.

This bulletin advance notification will be replaced with the February bulletin summary on February 8, 2011. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications.

Microsoft will host a webcast to address customer questions on the security bulletins on February 9, 2011, at 11:00 AM Pacific Time (US & Canada). Register now for the February Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Click to expand...

Microsoft

Note: See Executive Summaries for more information

ronjor · Feb 3, 2011

Hello all -

Today, as part of our usual monthly bulletin cadence, we are providing our Advance Notification Service for February's security bulletins. This month, we'll release 12 bulletins, three of them rated Critical and nine rated Important, addressing issues in Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. 22 issues will be addressed.

As part of this month's update, we'll be addressing issues related to two recent Security Advisories, 2490606 (a public vulnerability affecting the Windows Graphics Rendering Engine) and 2488013 (a public vulnerability affecting Internet Explorer). Additionally, we will be addressing an issue affecting FTP service in IIS 7.0 and 7.5.
Click to expand...

Microsoft

ronjor · Feb 8, 2011

Microsoft Security Bulletin Summary for February 2011

Published: February 08, 2011

Version: 1.0

This bulletin summary lists security bulletins released for February 2011.

With the release of the security bulletins for February 2011, this bulletin summary replaces the bulletin advance notification originally issued February 3, 2011. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

For information about how to receive automatic notifications whenever Microsoft security bulletins are issued, visit Microsoft Technical Security Notifications.

Microsoft is hosting a webcast to address customer questions on these bulletins on February 9, 2011, at 11:00 AM Pacific Time (US & Canada). Register now for the February Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Click to expand...

https://www.microsoft.com/technet/security/bulletin/ms11-feb.mspx

Note: See Executive Summaries for info

ronjor · Feb 8, 2011

Hello all --

Today, as part of our monthly security bulletin release, we have 12 bulletins addressing 22 vulnerabilities in Microsoft Windows, Office, Internet Explorer, and IIS (Internet Information Services). Three bulletins are rated Critical, and these are the bulletins we recommend for priority deployment:

o MS11-003. This bulletin resolves three critical-level and moderate-level vulnerabilities affecting all versions of Internet Explorer. Due to existing mitigations, this bulletin is only rated at Moderate severity for all versions of Windows Server, has an Exploitability Index rating of 1, and will deprecate Security Advisory 2488013.

o MS11-006. This bulletin addresses one Critical-level vulnerability affecting Windows XP, Vista, Server 2003, and Server 2008. Newer versions of our operating system are unaffected. The vulnerability involves Windows Shell Graphics and could if exploited lead to remote code execution. This has an Exploitability Index rating of 1 and will deprecate Security Advisory 2490606 which we released on January 4th. Since that time, we have not seen any attacks against this issue.

o MS11-007. This bulletin addresses one privately reported vulnerability affecting all supported versions of Windows and involving the OpenType Compact Font Driver. It's rated Critical for Windows Vista, Windows 7, Server 2008 and Server 2008 R2; it's rated Important for Windows XP and Server 2003. This issue has an Exploitability Index rating of 2.

In this video, Jerry Bryant discusses this month's bulletins in further detail:
Click to expand...

http://blogs.technet.com/b/msrc/

JRViejo · Feb 8, 2011

Microsoft today issued 12 security updates that patched 22 bugs in Windows, Internet Explorer (IE), Office and its Internet server software.

An analyst suspected that one of the dozen updates was released to prevent hackers from exploiting Windows 7 in the Pwn2Own contest slated to start in four weeks.

"I think this was a strategic move by Microsoft to prevent [researchers] from using the vulnerability as a mechanism to bypass ASLR," said Andrew Storms, director of security operations for nCircle Security, referring to the MS11-009 update that patched a bug in the JScript and VBScript scripting engines within Windows.
Click to expand...

Microsoft delivers 'big month' of patches, quashes 22 bugs by Gregg Keizer.

BoerenkoolMetWorst · Feb 8, 2011

There are a few patches for escalation of privilige vulnerabilities, but all are local. Still no fix for the win32k.sys exploit?
https://www.wilderssecurity.com/showthread.php?t=290797

FanJ · Feb 8, 2011

I don't want to be cross-posting but eh... see
https://www.wilderssecurity.com/showthread.php?t=292635 about one of the updates

BoerenkoolMetWorst · Feb 9, 2011

FanJ said:

I don't want to be cross-posting but eh... see
https://www.wilderssecurity.com/showthread.php?t=292635 about one of the updates
Click to expand...

Thanks

Log in or Sign up

Microsoft Security Bulletin Advance Notification for February 2011

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

JRViejo Super Moderator

BoerenkoolMetWorst Registered Member

FanJ Updates Team

BoerenkoolMetWorst Registered Member

Log in or Sign up

Microsoft Security Bulletin Advance Notification for February 2011

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

JRViejo Super Moderator

BoerenkoolMetWorst Registered Member

FanJ Updates Team

BoerenkoolMetWorst Registered Member

Useful Searches