Microsoft Security Bulletin Advance Notification for March 2012

ronjor · Mar 8, 2012

Published: Thursday, March 08, 2012

Version: 1.0

This is an advance notification of security bulletins that Microsoft is intending to release on March 13, 2012.

This bulletin advance notification will be replaced with the March bulletin summary on March 13, 2012. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications.

Microsoft will host a webcast to address customer questions on the security bulletins on March 14, 2012, at 11:00 AM Pacific Time (US & Canada). Register now for the March Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Click to expand...

https://technet.microsoft.com/en-us/security/bulletin/ms12-mar

ronjor · Mar 8, 2012

Hello. Today we’re releasing our advance notification for the March security bulletin release, which is scheduled for Tuesday, March 13. This month’s release includes six bulletins addressing seven vulnerabilities in Microsoft Windows, Visual Studio, and Expression Design. As always, we recommend that customers review the ANS summary page for more information and prepare for the testing and deployment of these bulletins as soon as possible.
Click to expand...

https://blogs.technet.com/b/msrc/archive/2012/03/08/march-2012-ans.aspx?Redirected=true

ronjor · Mar 13, 2012

Microsoft Security Bulletin Summary for March 2012

Published: Tuesday, March 13, 2012

Version: 1.0

This bulletin summary lists security bulletins released for March 2012.

With the release of the security bulletins for March 2012, this bulletin summary replaces the bulletin advance notification originally issued March 8, 2012. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

For information about how to receive automatic notifications whenever Microsoft security bulletins are issued, visit Microsoft Technical Security Notifications.

Microsoft is hosting a webcast to address customer questions on these bulletins on March 14, 2012, at 11:00 AM Pacific Time (US & Canada). Register now for the March Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Click to expand...

https://technet.microsoft.com/en-us/security/bulletin/ms12-mar

See Executive Summaries

ronjor · Mar 13, 2012

Hello. Today we’re releasing six security bulletins – one Critical-class, four Important and one Moderate – addressing seven issues in Microsoft Windows, Visual Studio, and Expression Design. We recommend that customers focus on MS12-020, our sole critical-class bulletin, as the March deployment priority. A little about MS12-020:
Click to expand...

https://blogs.technet.com/b/msrc/?Redirected=true

Dermot7 · Mar 13, 2012

Attention Microsoft Windows administrators: Stop what you’re doing and apply the new — and very critical — MS12-020 update.
Click to expand...

https://www.zdnet.com/blog/security...exploits-for-critical-windows-worm-hole/10745

ronjor · Mar 13, 2012

CVE-2012-0002: A closer look at MS12-020's critical issue

Security Update MS12-020 addresses two vulnerabilities in Microsoft’s implementation of the Remote Desktop Protocol (RDP). One of the two, CVE-2012-002, is a Critical, remote code execution vulnerability affecting all versions of Windows. This blog post shares additional information with the following goals:

To strongly encourage you to make a special priority of applying this particular update;
To give you an option to harden your environment until the update can be applied.

Note that CVE-2012-0002 was privately reported and we are not aware of any attacks in the wild. Additionally, the remote desktop protocol is disabled by default. However, due to the attractiveness of this vulnerability to attackers, we anticipate that an exploit for code execution will be developed in the next 30 days.

We understand and appreciate that our customers often need time to evaluate and install bulletins as appropriate for their environment. For systems running RDP without Network-Level Authentication (NLA) enabled, this post includes information on a mitigation that may be applied in advance of the bulletin.
Click to expand...

https://blogs.technet.com/b/srd/arc...s12-020-s-critical-issue.aspx?Redirected=true

BoerenkoolMetWorst · Mar 13, 2012

Should Windows update give a UAC pop-up? I think I've never seen it before except when upgrading IE to a new major version or installing a Service pack.

ronjor · Mar 13, 2012

If using Windows 7, what are your settings if you type UAC in the search box?

BoerenkoolMetWorst · Mar 13, 2012

ronjor said:

If using Windows 7, what are your settings if you type UAC in the search box?
Click to expand...

I've set it to Max, but even on Max I've never seen it before on normal updates.

ronjor · Mar 13, 2012

I've never seen it on WU either. May be a bug creeping around.

BoerenkoolMetWorst · Mar 13, 2012

I guess so. I clicked No because I thought it was weird it asked, but the updates completed without errors, and after reboot it shows all updates are succesfully installed.

Log in or Sign up

Microsoft Security Bulletin Advance Notification for March 2012

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Dermot7 Registered Member

ronjor Global Moderator

BoerenkoolMetWorst Registered Member

ronjor Global Moderator

BoerenkoolMetWorst Registered Member

ronjor Global Moderator

BoerenkoolMetWorst Registered Member

Log in or Sign up

Microsoft Security Bulletin Advance Notification for March 2012

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Dermot7 Registered Member

ronjor Global Moderator

BoerenkoolMetWorst Registered Member

ronjor Global Moderator

BoerenkoolMetWorst Registered Member

ronjor Global Moderator

BoerenkoolMetWorst Registered Member

Useful Searches