Fixlet Site - EnterpriseSecurity Current Version: 899 Published: Wed, 12 Sep 2007 02:56:05 GMT *************************************************************** Title: MS07-051: Vulnerability in Microsoft Agent Could Allow Remote Code Execution - Windows 2000 SP4 Severity: Critical Fixlet ID: 705101 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/ms07-051.mspx Fixlet Description: Microsoft has released a patch resolving a newly discovered, privately reported vulnerability. A remote code execution vulnerability exists in Microsoft Agent in the way that it handles certain specially crafted URLs. The vulnerability could allow an attacker to remotely execute code on the affected system. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-051: CORRUPT PATCH - Windows 2000 SP4 Severity: Critical Fixlet ID: 705102 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/ms07-051.mspx *************************************************************** Title: MS07-052: Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution - Visual Studio .NET 2002 SP1 Severity: Important Fixlet ID: 705201 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx Fixlet Description: Microsoft has released an important security update that resolves a publicly disclosed vulnerability. This vulnerability could allow remote code execution if a user opens a specially crafted RPT file. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-052: CORRUPT PATCH - Visual Studio .NET 2002 SP1 Severity: Important Fixlet ID: 705202 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx *************************************************************** Title: MS07-052: Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution - Visual Studio .NET 2003 Severity: Important Fixlet ID: 705203 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx Fixlet Description: Microsoft has released an important security update that resolves a publicly disclosed vulnerability. This vulnerability could allow remote code execution if a user opens a specially crafted RPT file. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-052: CORRUPT PATCH - Visual Studio .NET 2003 Severity: Important Fixlet ID: 705204 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx *************************************************************** Title: MS07-052: Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution - Visual Studio .NET 2003 SP1 Severity: Important Fixlet ID: 705205 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx Fixlet Description: Microsoft has released an important security update that resolves a publicly disclosed vulnerability. This vulnerability could allow remote code execution if a user opens a specially crafted RPT file. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-052: CORRUPT PATCH - Visual Studio .NET 2003 SP1 Severity: Important Fixlet ID: 705206 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx *************************************************************** Title: MS07-052: Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution - Visual Studio 2005 Severity: Important Fixlet ID: 705209 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx Fixlet Description: Microsoft has released an important security update that resolves a publicly disclosed vulnerability. This vulnerability could allow remote code execution if a user opens a specially crafted RPT file. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-052: CORRUPT PATCH - Visual Studio 2005 Severity: Important Fixlet ID: 705210 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx *************************************************************** Title: MS07-052: Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution - Visual Studio 2005 SP1 Severity: Important Fixlet ID: 705211 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx Fixlet Description: This important security update resolves a publicly disclosed vulnerability. This vulnerability could allow remote code execution if a user opens a specially crafted RPT file. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-052: CORRUPT PATCH - Visual Studio 2005 SP1 Severity: Important Fixlet ID: 705212 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx *************************************************************** Title: MS07-053: Vulnerability in Windows Services for UNIX 3.0 Could Allow Elevation of Privilege - Windows 2000/XP/2003 Severity: Important Fixlet ID: 705301 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx Fixlet Description: This important security update resolves one publicly disclosed vulnerability. A vulnerability exists in Windows Services for UNIX 3.0 where running certain setuid binary files could allow an attacker to gain elevation of privilege. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-053: CORRUPT PATCH - Windows 2000/XP/2003 Severity: Important Fixlet ID: 705302 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx *************************************************************** Title: MS07-053: Vulnerability in Windows Services for UNIX 3.5 Could Allow Elevation of Privilege - Windows 2000/XP/2003 Severity: Important Fixlet ID: 705303 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx Fixlet Description: This important security update resolves one publicly disclosed vulnerability. A vulnerability exists in Windows Services for UNIX 3.5 where running certain setuid binary files could allow an attacker to gain elevation of privilege. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-053: CORRUPT PATCH - Windows 2000/XP/2003 Severity: Important Fixlet ID: 705304 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx *************************************************************** Title: MS07-053: Vulnerability in Subsystem for UNIX-based Applications Could Allow Elevation of Privilege - Windows Server 2003 SP1/SP2 Severity: Important Fixlet ID: 705305 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx Fixlet Description: Microsoft has released an update that resolves a publicly reported vulnerability in Subsystem for UNIX-based Applications where running certain setuid binary files could allow an attacker to gain elevation of privilege. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-053: CORRUPT PATCH - Windows Server 2003 SP1/SP2 Severity: Important Fixlet ID: 705306 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx *************************************************************** Title: MS07-053: Vulnerability in Subsystem for UNIX-based Applications Could Allow Elevation of Privilege - Windows Vista Severity: Important Fixlet ID: 705307 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx Fixlet Description: Microsoft has released an update that resolves a publicly reported vulnerability in Subsystem for UNIX-based Applications where running certain setuid binary files could allow an attacker to gain elevation of privilege. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-053: Vulnerability in Subsystem for UNIX-based Applications Could Allow Elevation of Privilege - Windows Server 2003 SP1/SP2 (x64) Severity: Important Fixlet ID: 705309 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx Fixlet Description: Microsoft has released an update that resolves a publicly reported vulnerability in Subsystem for UNIX-based Applications where running certain setuid binary files could allow an attacker to gain elevation of privilege. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-053: CORRUPT PATCH - Windows Server 2003 SP1/SP2 (x64) Severity: Important Fixlet ID: 705310 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx *************************************************************** Title: MS07-053: Vulnerability in Subsystem for UNIX-based Applications Could Allow Elevation of Privilege - Windows Vista (x64) Severity: Important Fixlet ID: 705311 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-053.mspx Fixlet Description: Microsoft has released an update that resolves a publicly reported vulnerability in Subsystem for UNIX-based Applications where running certain setuid binary files could allow an attacker to gain elevation of privilege. After downloading and installing this patch, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution - MSN Messenger 6.2/7.0 - Windows 2000 SP4 Severity: Important Fixlet ID: 705401 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-054.mspx Fixlet Description: Microsoft has released an update that resolves a publicly disclosed vulnerability in MSN Messenger and Windows Live Messenger. The vulnerability could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. *************************************************************** Title: MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution - MSN Messenger 6.2 - Windows XP/2003/Vista Severity: Important Fixlet ID: 705403 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-054.mspx Fixlet Description: Microsoft has released an update that resolves a publicly disclosed vulnerability in MSN Messenger and Windows Live Messenger. The vulnerability could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Important Note: Microsoft currently issues upgrades for the MSN Messenger or Windows Live Messenger client using the MSN Messenger or Windows Live Messenger service because these online services have their own client deployment mechanism. Upon signing on to MSN Messenger service, users of MSN Messenger will be prompted by the client deployment mechanism in the MSN Messenger service to accept the upgrade. If you do not accept the upgrade, you may not be allowed access to MSN Messenger or Windows Live Messenger service. *************************************************************** Title: MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution - MSN Messenger 7.0 - Windows XP/2003/Vista Severity: Important Fixlet ID: 705404 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-054.mspx Fixlet Description: Microsoft has released an update that resolves a publicly disclosed vulnerability in MSN Messenger and Windows Live Messenger. The vulnerability could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Important Note: Microsoft currently issues upgrades for the MSN Messenger or Windows Live Messenger client using the MSN Messenger or Windows Live Messenger service because these online services have their own client deployment mechanism. Upon signing on to MSN Messenger service, users of MSN Messenger will be prompted by the client deployment mechanism in the MSN Messenger service to accept the upgrade. If you do not accept the upgrade, you may not be allowed access to MSN Messenger or Windows Live Messenger service. *************************************************************** Title: MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution - MSN Messenger 7.5 - Windows XP/2003/Vista Severity: Important Fixlet ID: 705405 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-054.mspx Fixlet Description: Microsoft has released an update that resolves a publicly disclosed vulnerability in MSN Messenger and Windows Live Messenger. The vulnerability could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Important Note: Microsoft currently issues upgrades for the MSN Messenger or Windows Live Messenger client using the MSN Messenger or Windows Live Messenger service because these online services have their own client deployment mechanism. Upon signing on to MSN Messenger service, users of MSN Messenger will be prompted by the client deployment mechanism in the MSN Messenger service to accept the upgrade. If you do not accept the upgrade, you may not be allowed access to MSN Messenger or Windows Live Messenger service. *************************************************************** Title: MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution - Windows Live Messenger 8.0 - Windows XP/2003/Vista Severity: Important Fixlet ID: 705406 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-054.mspx Fixlet Description: Microsoft has released an update that resolves a publicly disclosed vulnerability in MSN Messenger and Windows Live Messenger. The vulnerability could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Important Note: Microsoft currently issues upgrades for the MSN Messenger or Windows Live Messenger client using the MSN Messenger or Windows Live Messenger service because these online services have their own client deployment mechanism. Upon signing on to MSN Messenger service, users of MSN Messenger will be prompted by the client deployment mechanism in the MSN Messenger service to accept the upgrade. If you do not accept the upgrade, you may not be allowed access to MSN Messenger or Windows Live Messenger service. *************************************************************** Title: MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution - MSN Messenger 6.2 - Windows XP/2003/Vista (x64) Severity: Important Fixlet ID: 705407 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-054.mspx Fixlet Description: Microsoft has released an update that resolves a publicly disclosed vulnerability in MSN Messenger and Windows Live Messenger. The vulnerability could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Important Note: Microsoft currently issues upgrades for the MSN Messenger or Windows Live Messenger client using the MSN Messenger or Windows Live Messenger service because these online services have their own client deployment mechanism. Upon signing on to MSN Messenger service, users of MSN Messenger will be prompted by the client deployment mechanism in the MSN Messenger service to accept the upgrade. If you do not accept the upgrade, you may not be allowed access to MSN Messenger or Windows Live Messenger service. *************************************************************** Title: MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution - MSN Messenger 7.0 - Windows XP/2003/Vista (x64) Severity: Important Fixlet ID: 705408 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS07-054.mspx Fixlet Description: Microsoft has released an update that resolves a publicly disclosed vulnerability in MSN Messenger and Windows Live Messenger. The vulnerability could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Important Note: Microsoft currently issues upgrades for the MSN Messenger or Windows Live Messenger client using the MSN Messenger or Windows Live Messenger service because these online services have their own client deployment mechanism. Upon signing on to MSN Messenger service, users of MSN Messenger will be prompted by the client deployment mechanism in the MSN Messenger service to accept the upgrade. If you do not accept the upgrade, you may not be allowed access to MSN Messenger or Windows Live Messenger service. *************************************************************** Title: MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution - MSN Messenger 7.5 - Windows XP/2003/Vista (x64) Severity: Important Fixlet ID: 705409 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-054.mspx Fixlet Description: Microsoft has released an update that resolves a publicly disclosed vulnerability in MSN Messenger and Windows Live Messenger. The vulnerability could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Important Note: Microsoft currently issues upgrades for the MSN Messenger or Windows Live Messenger client using the MSN Messenger or Windows Live Messenger service because these online services have their own client deployment mechanism. Upon signing on to MSN Messenger service, users of MSN Messenger will be prompted by the client deployment mechanism in the MSN Messenger service to accept the upgrade. If you do not accept the upgrade, you may not be allowed access to MSN Messenger or Windows Live Messenger service. *************************************************************** Title: MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution - Windows Live Messenger 8.0 - Windows XP/2003/Vista (x64) Severity: Important Fixlet ID: 705410 Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS07-054.mspx Fixlet Description: Microsoft has released an update that resolves a publicly disclosed vulnerability in MSN Messenger and Windows Live Messenger. The vulnerability could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Important Note: Microsoft currently issues upgrades for the MSN Messenger or Windows Live Messenger client using the MSN Messenger or Windows Live Messenger service because these online services have their own client deployment mechanism. Upon signing on to MSN Messenger service, users of MSN Messenger will be prompted by the client deployment mechanism in the MSN Messenger service to accept the upgrade. If you do not accept the upgrade, you may not be allowed access to MSN Messenger or Windows Live Messenger service.