Microsoft Security Bulletin Summary for May 2007

Microsoft Security Bulletin(s) for 5/08/2007
http://www.microsoft.com/technet/security/bulletin/ms07-may.mspx

May 8 2007
Today Microsoft released the following Security Bulletin(s).

Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.

Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.

Bulletin Summary:


Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution (935966):
http://www.microsoft.com/technet/security/Bulletin/MS07-029.mspx

Vulnerability in CAPICOM Could Allow Remote Code Execution (931906)
http://www.microsoft.com/technet/security/Bulletin/MS07-028.mspx

Cumulative Security Update for Internet Explorer 931768
http://www.microsoft.com/technet/security/Bulletin/MS07-027.mspx

Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (931832)
http://www.microsoft.com/technet/security/Bulletin/MS07-026.mspx

Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873)
http://www.microsoft.com/technet/security/Bulletin/MS07-025.mspx

Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232)
http://www.microsoft.com/technet/security/Bulletin/MS07-024.mspx

Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (934233)
http://www.microsoft.com/technet/security/Bulletin/MS07-023.mspx

Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.

If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety 1-866-727-2338. International customers should contact their local subsidiary.

As always, download the updates only from the vendors website - visit Windows Update and Office Update or Microsoft Update websites. You may also get the updates thru Automatic Updates functionality in Windows system.

Security Tool
Find out if you are missing important Microsoft product updates by using MBSA.

 

Microsoft Security Bulletin MS07-027
Cumulative Security Update for Internet Explorer 931768
Published: May 8, 2007 | Updated: May 16, 2007
Revisions:

• V1.0 (May 8, 2007): Bulletin published.

• V1.1 (May 8, 2007): Updated file version, size and time-stamp information for the Microsoft Internet Explorer 6 for Windows XP Service Pack 2.

• V1.2 (May 16, 2007): Bulletin revised due to an incorrect file name in Arbitrary File Rewrite Vulnerability - CVE-2007-2221 killbit table; A new issue discovered with the security update: 937409The “File Download – Security Warning” dialog box opens when you try to open Internet Explorer 7;Updated file names for Internet Explorer 7

http://www.microsoft.com/technet/security/Bulletin/MS07-027.mspx

 

Microsoft Security Bulletin MS07-025
Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873)
Published: May 8, 2007 | Updated: May 16, 2007

Version: 1.1

Revisions:
• V1.0 (May 8, 2007): Bulletin published.

• V1.1 (May 16, 2007): Bulletin workarounds section updated, with the removal of the “Use Microsoft Word Viewer 2003 to open and view files” workaround. This workaround is not valid for the vulnerability discussed in this security bulletin.

http://www.microsoft.com/technet/security/bulletin/ms07-025.mspx

 

Microsoft Security Bulletin MS07-023
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (934233)
Published: May 8, 2007 | Updated: May 16, 2007

Version: 1.1

Revisions:

• V1.0 (May 8, 2007): Bulletin published.

• V1.1 (May 16, 2007): Bulletin “Installation File Information” section updated with the correct file name for the Office 2007 Compatibility Pack.

http://www.microsoft.com/technet/security/bulletin/ms07-023.mspx