[BigFix-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Enterprise Security'

[autonotify at us.ibm.com]

Fixlet Site - 'Enterprise Security'
Current Version: 1483	Published: Mon, 09 May 2011 22:55:31  GMT

New Fixlets:
============

***************************************************************
Title: Security Advisory 2506014: Update for the Windows Operating System Loader - Windows Vista/2008 (x64)
Severity: <Unspecified>
Fixlet ID: 250601401
Fixlet Link: http://www.microsoft.com/technet/security/advisory/2506014.mspx

Fixlet Description: Microsoft is announcing the availability of an update to winload.exe to address an issue in driver signing enforcement. While this is not an issue that would require a security update, this update addresses a method by which unsigned drivers could be loaded by winload.exe. This technique is often utilized by malware to stay resident on a system after the initial infection. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities.

***************************************************************
Title: Security Advisory 2506014: Update for the Windows Operating System Loader - Windows 7/2008R2 (x64)
Severity: <Unspecified>
Fixlet ID: 250601403
Fixlet Link: http://www.microsoft.com/technet/security/advisory/2506014.mspx

Fixlet Description: Microsoft is announcing the availability of an update to winload.exe to address an issue in driver signing enforcement. While this is not an issue that would require a security update, this update addresses a method by which unsigned drivers could be loaded by winload.exe. This technique is often utilized by malware to stay resident on a system after the initial infection. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities.