MS Security Bulletin Advance Notification [.ani ???]

[Guest]

It is "rumored" that this will be an "Out-of-Schedule Patch" for the .ani
vulnerability.

http://www.microsoft.com/technet/security/bulletin/advance.mspx

highlight:
On Tuesday 3 April 2007 Microsoft is planning to release:

Security Updates
•
One Microsoft Security Bulletin affecting Microsoft Windows. The highest
Maximum Severity rating for these is Critical. These updates will require a
restart. These updates will be detectable using the Microsoft Baseline
Security Analyzer.

?
Tim
Geek w/o Portfolio
Only the Paranoid Survive

 

[Guest]

Boy I wish we could edit our posts

More information:
http://blogs.technet.com/msrc/archi...e-for-microsoft-security-advisory-935423.aspx

Highlights:

"From our ongoing monitoring of the situation, we can say that over this
weekend attacks against this vulnerability have increased somewhat.
Additionally, we are aware of public disclosure of proof-of-concept code. In
light of these points, and based on customer feedback, we have been working
around the clock to test this update and are currently planning to release
the security update that addresses this issue on Tuesday April 3, 2007."
....

"I’m sure one question in people’s minds is how we’re able to release an
update for this issue so quickly. I mentioned on Friday that this issue was
first brought to us in late December 2006 and we’ve been working on our
investigation and a security update since then. This update was previously
scheduled for release as part of the April monthly release on April 10, 2007.
Due to the increased risk to customers from these latest attacks, we were
able to expedite our testing to ensure an update is ready for broad
distribution sooner than April 10.

In the meantime, I do want to encourage everyone to make sure that you have
the latest signatures for your antivirus and other security products. As I
noted on Friday we have given our partners in the MSRA program information
that they can use to help protect against attempts to exploit this
vulnerability. Until we release the security update for this issue, the
latest signatures for your security products can help to provide additional
protections"

?
Tim
Geek w/o Portfolio

 

[Guest]

It is "rumored" that this will be an "Out-of-Schedule Patch" for the .ani
vulnerability.

http://www.microsoft.com/technet/security/bulletin/advance.mspx

Thanks for this tip-off, Tim. I can't follow much of the discussion on this,
but to know that a patch is imminent is reassuring.

 

[occam]

Boy I wish we could edit our posts

More information:
http://blogs.technet.com/msrc/archi...e-for-microsoft-security-advisory-935423.aspx

Highlights:

"From our ongoing monitoring of the situation, we can say that over this
weekend attacks against this vulnerability have increased somewhat.
Additionally, we are aware of public disclosure of proof-of-concept code. In
light of these points, and based on customer feedback, we have been working
around the clock to test this update and are currently planning to release
the security update that addresses this issue on Tuesday April 3, 2007."
...

"I’m sure one question in people’s minds is how we’re able to release an
update for this issue so quickly. I mentioned on Friday that this issue was
first brought to us in late December 2006 and we’ve been working on our
investigation and a security update since then. This update was previously
scheduled for release as part of the April monthly release on April 10, 2007.
Due to the increased risk to customers from these latest attacks, we were
able to expedite our testing to ensure an update is ready for broad
distribution sooner than April 10.

In the meantime, I do want to encourage everyone to make sure that you have
the latest signatures for your antivirus and other security products. As I
noted on Friday we have given our partners in the MSRA program information
that they can use to help protect against attempts to exploit this
vulnerability. Until we release the security update for this issue, the
latest signatures for your security products can help to provide additional
protections"

?
Tim
Geek w/o Portfolio

It is coming tomorrow, 3 April 2007

http://www.microsoft.com/technet/security/bulletin/advance.mspx

 

[Bill Sanderson MVP]

Thanks Tim!