Fixlet Site - EnterpriseSecurity Current Version: 977 Published: Wed, 09 Apr 2008 05:30:47 GMT New Fixlets: ============ *************************************************************** Title: MS08-018: Vulnerability in Microsoft Project Could Allow Remote Code Execution - Project 2000 SR-1 Severity: Critical Fixlet ID: 801801 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-018.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Office Project that could allow remote code execution if a user opens a specially crafted Project file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-018: Vulnerability in Microsoft Project Could Allow Remote Code Execution - Project 2002 SP1 Severity: Important Fixlet ID: 801811 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-018.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Office Project that could allow remote code execution if a user opens a specially crafted Project file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-018: Vulnerability in Microsoft Project Could Allow Remote Code Execution - Project 2003 SP2 Severity: Important Fixlet ID: 801821 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-018.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in Microsoft Office Project that could allow remote code execution if a user opens a specially crafted Project file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-019: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution - Visio 2002 SP2 Severity: Important Fixlet ID: 801901 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-019.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security update that resolves privately reported vulnerabilities in Microsoft Office Visio that could allow remote code execution if a user opens a specially crafted Visio file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-019: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution - Visio 2003 SP2/SP3 Severity: Important Fixlet ID: 801906 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-019.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security update that resolves privately reported vulnerabilities in Microsoft Office Visio that could allow remote code execution if a user opens a specially crafted Visio file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-019: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution - Visio 2007 Gold/SP1 Severity: Important Fixlet ID: 801916 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-019.mspx Fixlet Link: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=129 Fixlet Description: Microsoft has released a security update that resolves privately reported vulnerabilities in Microsoft Office Visio that could allow remote code execution if a user opens a specially crafted Visio file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-020: Vulnerability in DNS Client Could Allow Spoofing - Windows 2000 SP4 Severity: Important Fixlet ID: 802001 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS clients and could allow an attacker to send specially crafted responses to DNS requests, thereby spoofing or redirecting Internet traffic from legitimate locations. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-020: CORRUPT PATCH - Windows 2000 SP4 Severity: Important Fixlet ID: 802002 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx *************************************************************** Title: MS08-020: Vulnerability in DNS Client Could Allow Spoofing - Windows XP SP2 Severity: Important Fixlet ID: 802003 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS clients and could allow an attacker to send specially crafted responses to DNS requests, thereby spoofing or redirecting Internet traffic from legitimate locations. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-020: CORRUPT PATCH - Windows XP SP2 Severity: Important Fixlet ID: 802004 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx *************************************************************** Title: MS08-020: Vulnerability in DNS Client Could Allow Spoofing - Windows XP (x64) Severity: Important Fixlet ID: 802005 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS clients and could allow an attacker to send specially crafted responses to DNS requests, thereby spoofing or redirecting Internet traffic from legitimate locations. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-020: CORRUPT PATCH - Windows XP (x64) Severity: Important Fixlet ID: 802006 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx *************************************************************** Title: MS08-020: Vulnerability in DNS Client Could Allow Spoofing - Windows Server 2003 SP1/SP2 Severity: Important Fixlet ID: 802007 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS clients and could allow an attacker to send specially crafted responses to DNS requests, thereby spoofing or redirecting Internet traffic from legitimate locations. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-020: CORRUPT PATCH - Windows Server 2003 SP1/SP2 Severity: Important Fixlet ID: 802008 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx *************************************************************** Title: MS08-020: Vulnerability in DNS Client Could Allow Spoofing - Windows Server 2003 (x64) Severity: Important Fixlet ID: 802009 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS clients and could allow an attacker to send specially crafted responses to DNS requests, thereby spoofing or redirecting Internet traffic from legitimate locations. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-020: CORRUPT PATCH - Windows Server 2003 (x64) Severity: Important Fixlet ID: 802010 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx *************************************************************** Title: MS08-020: Vulnerability in DNS Client Could Allow Spoofing - Windows Vista Severity: Important Fixlet ID: 802011 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS clients and could allow an attacker to send specially crafted responses to DNS requests, thereby spoofing or redirecting Internet traffic from legitimate locations. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-020: Vulnerability in DNS Client Could Allow Spoofing - Windows Vista (x64) Severity: Important Fixlet ID: 802013 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS clients and could allow an attacker to send specially crafted responses to DNS requests, thereby spoofing or redirecting Internet traffic from legitimate locations. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution - Windows 2000 SP4 Severity: Critical Fixlet ID: 802101 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS08-021: CORRUPT PATCH - Windows 2000 SP4 Severity: Critical Fixlet ID: 802102 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx *************************************************************** Title: MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution - Windows XP SP2 Severity: Critical Fixlet ID: 802103 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS08-021: CORRUPT PATCH - Windows XP SP2 Severity: Critical Fixlet ID: 802104 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx *************************************************************** Title: MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution - Windows XP (x64) Severity: Critical Fixlet ID: 802105 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS08-021: CORRUPT PATCH - Windows XP (x64) Severity: Critical Fixlet ID: 802106 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx *************************************************************** Title: MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution - Windows Server 2003 SP1/SP2 Severity: Critical Fixlet ID: 802107 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS08-021: CORRUPT PATCH - Windows Server 2003 SP1/SP2 Severity: Critical Fixlet ID: 802108 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx *************************************************************** Title: MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution - Windows Server 2003 (x64) Severity: Critical Fixlet ID: 802109 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS08-021: CORRUPT PATCH - Windows Server 2003 (x64) Severity: Critical Fixlet ID: 802110 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx *************************************************************** Title: MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution - Windows Vista Gold/SP1 Severity: Critical Fixlet ID: 802111 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution - Windows Vista (x64) Severity: Critical Fixlet ID: 802113 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution - Windows Server 2008 Severity: Critical Fixlet ID: 802115 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution - Windows Server 2008 (x64) Severity: Critical Fixlet ID: 802117 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-021.mspx Fixlet Description: Microsoft has released a security update that resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities. *************************************************************** Title: MS08-022: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution - Windows 2000 SP4 Severity: Critical Fixlet ID: 802201 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the VBScript and JScript scripting engines in Windows. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-022: CORRUPT PATCH - Windows 2000 SP4 Severity: Critical Fixlet ID: 802202 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx *************************************************************** Title: MS08-022: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution - Windows XP SP2 Severity: Critical Fixlet ID: 802203 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the VBScript and JScript scripting engines in Windows. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-022: CORRUPT PATCH - Windows XP SP2 Severity: Critical Fixlet ID: 802204 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx *************************************************************** Title: MS08-022: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution - Windows XP (x64) Severity: Critical Fixlet ID: 802205 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the VBScript and JScript scripting engines in Windows. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-022: CORRUPT PATCH - Windows XP (x64) Severity: Critical Fixlet ID: 802206 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx *************************************************************** Title: MS08-022: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution - Windows Server 2003 SP1/SP2 Severity: Critical Fixlet ID: 802207 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the VBScript and JScript scripting engines in Windows. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-022: CORRUPT PATCH - Windows Server 2003 SP1/SP2 Severity: Critical Fixlet ID: 802208 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx *************************************************************** Title: MS08-022: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution - Windows Server 2003 (x64) Severity: Critical Fixlet ID: 802209 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the VBScript and JScript scripting engines in Windows. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-022: CORRUPT PATCH - Windows Server 2003 (x64) Severity: Critical Fixlet ID: 802210 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-022.mspx *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - IE 5.01 SP4 - Windows 2000 SP4 Severity: Critical Fixlet ID: 802301 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-023: CORRUPT PATCH - Windows 2000 SP4 Severity: Critical Fixlet ID: 802302 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - IE 6.0 SP1 - Windows 2000 SP4 Severity: Critical Fixlet ID: 802303 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-023: CORRUPT PATCH - Windows 2000 SP4 Severity: Critical Fixlet ID: 802304 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - Windows XP SP2 Severity: Critical Fixlet ID: 802305 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-023: CORRUPT PATCH - Windows XP SP2 Severity: Critical Fixlet ID: 802306 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - Windows XP (x64) Severity: Critical Fixlet ID: 802307 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-023: CORRUPT PATCH - Windows XP (x64) Severity: Critical Fixlet ID: 802308 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - Windows Server 2003 SP1/SP2 Severity: Moderate Fixlet ID: 802309 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-023: CORRUPT PATCH - Windows Server 2003 SP1/SP2 Severity: Moderate Fixlet ID: 802310 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - Windows Server 2003 (x64) Severity: Moderate Fixlet ID: 802311 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-023: CORRUPT PATCH - Windows Server 2003 (x64) Severity: Moderate Fixlet ID: 802312 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - Windows Vista Gold/SP1 Severity: Important Fixlet ID: 802313 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - Windows Vista Gold/SP1 (x64) Severity: Important Fixlet ID: 802315 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - Windows Server 2008 Severity: Low Fixlet ID: 802317 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-023: Security Update of ActiveX Kill Bits - Windows Server 2008 (x64) Severity: Low Fixlet ID: 802319 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability for a Microsoft product. This update also includes a kill bit for the Yahoo! Music Jukebox product. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 5.01 SP4 - Windows 2000 SP4 Severity: Critical Fixlet ID: 802401 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows 2000 SP4 Severity: Critical Fixlet ID: 802402 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 6 SP1 - Windows 2000 SP4 Severity: Critical Fixlet ID: 802403 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows 2000 SP4 Severity: Critical Fixlet ID: 802404 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 6 - Windows XP SP2 Severity: Critical Fixlet ID: 802405 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows XP SP2 Severity: Critical Fixlet ID: 802406 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 6 - Windows XP (x64) Severity: Critical Fixlet ID: 802407 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows XP (x64) Severity: Critical Fixlet ID: 802408 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 6 - Windows Server 2003 SP1/SP2 Severity: Critical Fixlet ID: 802409 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows Server 2003 SP1/SP2 Severity: Critical Fixlet ID: 802410 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 6 - Windows Server 2003 (x64) Severity: Critical Fixlet ID: 802411 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows Server 2003 (x64) Severity: Critical Fixlet ID: 802412 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 7 - Windows XP SP2 Severity: Critical Fixlet ID: 802413 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows XP SP2 Severity: Critical Fixlet ID: 802414 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 7 - Windows XP (x64) Severity: Critical Fixlet ID: 802415 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows XP (x64) Severity: Critical Fixlet ID: 802416 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 7 - Windows Server 2003 SP1/SP2 Severity: Critical Fixlet ID: 802417 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows Server 2003 SP1/SP2 Severity: Critical Fixlet ID: 802418 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 7 - Windows Server 2003 (x64) Severity: Critical Fixlet ID: 802419 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: CORRUPT PATCH - Windows Server 2003 (x64) Severity: Critical Fixlet ID: 802420 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 7 - Windows Vista Gold/SP1 Severity: Critical Fixlet ID: 802421 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 7 - Windows Vista (x64) Severity: Critical Fixlet ID: 802423 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 7 - Windows Server 2008 Severity: Critical Fixlet ID: 802425 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-024: Cumulative Security Update for Internet Explorer - IE 7 - Windows Server 2008 (x64) Severity: Critical Fixlet ID: 802427 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx Fixlet Description: Microsoft has released a security update that resolves one privately reported vulnerability. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege - Windows 2000 SP4 Severity: Important Fixlet ID: 802501 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-025: CORRUPT PATCH - Windows 2000 SP4 Severity: Important Fixlet ID: 802502 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx *************************************************************** Title: MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege - Windows XP SP2 Severity: Important Fixlet ID: 802503 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-025: CORRUPT PATCH - Windows XP SP2 Severity: Important Fixlet ID: 802504 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx *************************************************************** Title: MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege - Windows XP (x64) Severity: Important Fixlet ID: 802505 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-025: CORRUPT PATCH - Windows XP (x64) Severity: Important Fixlet ID: 802506 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx *************************************************************** Title: MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege - Windows Server 2003 SP1/SP2 Severity: Important Fixlet ID: 802507 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-025: CORRUPT PATCH - Windows Server 2003 SP1/SP2 Severity: Important Fixlet ID: 802508 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx *************************************************************** Title: MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege - Windows Server 2003 (x64) Severity: Important Fixlet ID: 802509 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-025: CORRUPT PATCH - Windows Server 2003 (x64) Severity: Important Fixlet ID: 802510 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx *************************************************************** Title: MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege - Windows Vista Gold/SP1 Severity: Important Fixlet ID: 802511 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege - Windows Vista (x64) Severity: Important Fixlet ID: 802513 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege - Windows Server 2008 Severity: Important Fixlet ID: 802515 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information. *************************************************************** Title: MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege - Windows Server 2008 (x64) Severity: Important Fixlet ID: 802517 Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx Fixlet Description: Microsoft has released a security update that resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. After downloading and installing this update, affected computers will no longer be susceptible to this vulnerability. Important Note: There are known issues associated with the installation of this update. See the Known Issues section of the security bulletin for more information.