Fixlet Site - EnterpriseSecurity Current Version: 823 Published: Wed, 10 Jan 2007 05:08:04 GMT *************************************************************** Title: MS07-001: Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution - Office 2003 Portuguese (Brazil) MUI (Network/Local Install) Severity: Important Fixlet ID: 700101 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-001.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a patch eliminating a security vulnerability in Office 2003 Multilingual User Interface Pack (MUI). This update resolves a newly discovered, publicly reported vulnerability. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-001: Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution - Project 2003 Portuguese (Brazil) MUI (Network/Local Install) Severity: Important Fixlet ID: 700103 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-001.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a patch eliminating a security vulnerability in Project 2003 Multilingual User Interface Pack (MUI). This update resolves a newly discovered, publicly reported vulnerability. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-001: Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution - Office 2003 Proofing Tools (Network/Local Install) Severity: Important Fixlet ID: 700107 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-001.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a patch eliminating a security vulnerability in Office 2003 Proofing Tools. This update resolves a newly discovered, publicly reported vulnerability. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-001: Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution - Visio 2003 Portuguese (Brazil) MUI (Network/Local Install) Severity: Important Fixlet ID: 700108 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-001.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a patch eliminating a security vulnerability in Visio 2003 Multilingual User Interface Pack (MUI). This update resolves a newly discovered, publicly reported vulnerability. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2000 (Local Install) Severity: Critical Fixlet ID: 700201 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2000. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2000 - Windows NT/2000/XP/2003 (Network Install) Severity: Critical Fixlet ID: 700202 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2000. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2000 - Windows NT/2000/XP/2003 (Administrative Install) Severity: Critical Fixlet ID: 700203 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2000. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2002 (Network/Local Install) Severity: Important Fixlet ID: 700204 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2002. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2002 - Windows NT/2000/XP/2003 (Administrative Install) Severity: Important Fixlet ID: 700206 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2002. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2003 (Local Install) Severity: Important Fixlet ID: 700207 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2003. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2003 - Windows NT/2000/XP/2003 (Network Install) Severity: Important Fixlet ID: 700208 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2000. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2003 - Windows NT/2000/XP/2003 (Administrative Install) Severity: Important Fixlet ID: 700209 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2000. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel Viewer 2003 Severity: Important Fixlet ID: 700210 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Description: Microsoft has released a security patch for Excel Viewer 2003. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2002 - Windows 9x/ME (Administrative Install) Severity: Important Fixlet ID: 700212 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2002. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2000 - Windows 9x/ME (Network Install) Severity: Critical Fixlet ID: 700213 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2000. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Excel 2000 - Windows 9x/ME (Administrative Install) Severity: Critical Fixlet ID: 700214 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Excel 2000. This update resolves several newly discovered, privately reported vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2000 (Local Install) Severity: Critical Fixlet ID: 700301 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2000. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are several known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2000 - Windows NT/2000/XP/2003 (Network Install) Severity: Critical Fixlet ID: 700302 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2000. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are several known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2000 - Windows NT/2000/XP/2003 (Administrative Install) Severity: Critical Fixlet ID: 700303 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2000. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are several known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2002 (Network/Local Install) Severity: Important Fixlet ID: 700304 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2002. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are several known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2002 - Windows NT/2000/XP/2003 (Administrative Install) Severity: Important Fixlet ID: 700305 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2002. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are several known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2003 (Network/Local Install) Severity: Important Fixlet ID: 700306 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2003. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2003 (Administrative Install) Severity: Important Fixlet ID: 700307 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2003. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are several known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2002 - Windows 9x/ME (Administrative Install) Severity: Important Fixlet ID: 700308 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2002. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are several known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2000 - Windows 9x/ME(Network Install) Severity: Critical Fixlet ID: 700309 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2000. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are several known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution - Outlook 2000 - Windows 9x/ME (Administrative Install) Severity: Critical Fixlet ID: 700310 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-003.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security patch for Outlook 2000. This update resolves several newly-discovered, privately reported and public vulnerabilities. On vulnerable versions of Office, if a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of the client workstation. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are several known issues associated with the installation of this patch. See the Caveats section of the security bulletin for more information. *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - IE 6.0 SP1 - Windows 2000 SP4 Severity: Critical Fixlet ID: 700401 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-004: CORRUPT PATCH - IE 6.0 SP1 - Windows 2000 SP4 Severity: Critical Fixlet ID: 700402 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - IE 5.01 SP4 - Windows 2000 SP4 Severity: Critical Fixlet ID: 700405 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-004: CORRUPT PATCH - IE 5.01 SP4 - Windows 2000 SP4 Severity: Critical Fixlet ID: 700406 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - IE 7.0 - Windows XP SP2 Severity: Critical Fixlet ID: 700407 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-004: CORRUPT PATCH - IE 7.0 - Windows XP SP2 Severity: Critical Fixlet ID: 700408 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - Windows XP SP2 Severity: Critical Fixlet ID: 700409 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-004: CORRUPT PATCH - Windows XP SP2 Severity: Critical Fixlet ID: 700410 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - Windows Server 2003 Severity: Critical Fixlet ID: 700411 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-004: CORRUPT PATCH - Windows Server 2003 Severity: Critical Fixlet ID: 700412 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - IE 7.0 - Windows XP/2003 (x64) Severity: Critical Fixlet ID: 700413 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-004: CORRUPT PATCH - IE 7.0 - Windows XP/2003 (x64) Severity: Critical Fixlet ID: 700414 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - Windows XP/2003 (x64) Severity: Critical Fixlet ID: 700415 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-004: CORRUPT PATCH - Windows XP/2003 (x64) Severity: Critical Fixlet ID: 700416 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - IE 7.0 - Windows Server 2003 Severity: Critical Fixlet ID: 700417 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS07-004: CORRUPT PATCH - IE 7.0 - Windows Server 2003 Severity: Critical Fixlet ID: 700418 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - Windows XP/2003 (x64) - BES < 6.0 Severity: Critical Fixlet ID: 700419 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: The current 32-bit BES Client can only verify the properties of 32-bit files located in the %WINDIR%\SysWOW64 directory and cannot access registry keys outside the HKLM\SOFTWARE\WOW6432Node branch of the registry. Only limited content for x64 Windows will be available before a 64-bit compatible BES Client is released. Full support for x64 Windows is forthcoming. *************************************************************** Title: MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution - IE 7.0 - Windows XP/2003 (x64) - BES < 6.0 Severity: Critical Fixlet ID: 700420 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-004.mspx Fixlet Description: Microsoft has released an update resolving a public vulnerability as well as additional issues discovered through internal investigations. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. Important Note: The current 32-bit BES Client can only verify the properties of 32-bit files located in the %WINDIR%\SysWOW64 directory and cannot access registry keys outside the HKLM\SOFTWARE\WOW6432Node branch of the registry. Only limited content for x64 Windows will be available before a 64-bit compatible BES Client is released. Full support for x64 Windows is forthcoming.