Microsoft Security Bulletins for October 11th 2005

Updates are now out folks 8 high priority updates plus the usual Windows Malicious Software Removal Tool making 9 for XP ( dependent on version and installed options )


Windows Malicious Software Removal Tool - October 2005 (KB890830)
Download size: 1.2 MB , less than 1 minute
After the download, this tool runs once to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove any infection found. If an infection is found, the tool will display a status report the next time you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center or run an online version from microsoft.com. This tool is not a replacement for an anti-virus product. To help protect your computer, you should use an anti-virus product.

Details

Cumulative Security Update for Internet Explorer for Windows XP (KB896688)
Typical download size: 1.7 MB , 2 minutes
Security issues have been identified that could allow an attacker to compromise a computer running Microsoft Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Details

Security Update for Windows XP (KB902400)
Typical download size: 1.8 MB , 2 minutes
A remote code execution security issue has been identified that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Details

Security Update for Windows XP (KB899589)
Typical download size: 480 KB , less than 1 minute
A security issue has been identified in the Client Service for NetWare that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it, if you have installed this service. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Details

Security Update for Windows XP (KB900725)
Typical download size: 1.5 MB , 1 minute
A security issue has been identified that could allow an authenticated attacker to gain access and potentially compromise your Microsoft Windows-based system. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Details

Security Update for Windows XP (KB901017)
Typical download size: 600 KB , 1 minute
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects (CDO) and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Details
Note: KB numbers not same as whats coming off Windows Update but they are same update.

Security Update for Windows XP (KB905749)
Typical download size: 480 KB , less than 1 minute
A security issue has been identified in the Plug and Play service that could allow an authenticated attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Details

Security Update for Windows XP (KB905414)
Typical download size: 53 KB , less than 1 minute
A denial of service security issue has been identified that could cause the Network Manager service to stop responding on your Windows-based system. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Details

Security Update for Windows XP (KB904706)
Typical download size: 588 KB , 1 minute
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using DirectShow and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Details

All installed fine on my 2 PCs

http://img411.imageshack.us/img411/7334/untitled6hh.jpg

 

UPDATE: quietly MS has issued 2 updates to the October Security Downloads, these are,

Cumulative Security Update for Internet Explorer (896688)
Version 1.1, 12th October 2005

This update resolves a newly-discovered public vulnerability and other privately-reported variations of the same vulnerability. The Microsoft DDS Library Shape Control (Msdds.dll) and other COM objects could, when instantiated in Internet Explorer, allow an attacker to take complete control of an affected system. Because these COM objects were not designed to be instantiated in Internet Explorer, this update sets the kill bit for the affected Class Identifiers (CLSID) in these COM objects. The vulnerability is documented in the “Vulnerability Details” section of this bulletin.


Vulnerability in DirectShow Could Allow Remote Code Execution (904706)
Version 1.1, 12th October 2005

This update resolves a newly-discovered, privately-reported vulnerability. The vulnerability is documented in the "Vulnerability Details" section of this bulletin. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

 

Microsoft Security Bulletin Minor Revisions

The following bulletins have undergone a minor revision increment.
Please see the appropriate bulletin for more details.

* MS05-050
http://www.microsoft.com/technet/security/bulletin/MS05-050.mspx
- Reason for revision: Bulletin updated for the following: Caveats and FAQ were updated to reflect the available Microsoft Knowledge Base Article 909596 and to clarify a known issue that affected Windows 2000 SP4 customers who were running DirectX. In
the "Frequently asked questions (FAQ) related to this security update" section, updated the "What updates does this release replace" question to make it clearer with regards to DirectX and Windows 2000. Added information about Windows XP Professional
x64 Edition to the "File Information" section under "Windows XP (all versions)". Revised the "DirectX Standalone" "Registry Key Verification" for all versions.
- Originally posted: October 11, 2005 - Updated: October 19, 2005 - Bulletin Severity Rating: Critical - Version: 1.2

* MS05-052
http://www.microsoft.com/technet/security/bulletin/MS05-052.mspx
- Reason for revision: Bulletin updated to revise the install registry key name for the Windows Server 2003 security update.
- Originally posted: October 11, 2005 - Updated: October 19, 2005 - Bulletin Severity Rating: Critical - Version: 1.2