[BESAdmin-Announcements] Content Modification in Patches for Windows (English)

Announcements for BES Administrators besadmin-announcements at bigmail.bigfix.com
Thu Apr 2 02:52:57 PDT 2015



Content in the Patches for Windows (English) has been modified:


Modified Fixlet Messages:
[Major] MS11-049: Vulnerability in the Microsoft XML Editor Could Allow
Information Disclosure - Visual Studio 2008 SP1    (ID: 1104957)
[Minor] 3009008: Security Advisory: Vulnerability in SSL 3.0 Could Allow
Information Disclosure - Enable Workaround for Server Software (Disable SSL
3.0 in Windows)    (ID: 300900807)
[Minor] 3009008: Security Advisory: Vulnerability in SSL 3.0 Could Allow
Information Disclosure - Enable Workaround for Client Software (Disable SSL
3.0 in Windows)    (ID: 300900811)
[Minor] 3009008: Security Advisory: Vulnerability in SSL 3.0 Could Allow
Information Disclosure - Disable Workaround for Client Software (Disable
SSL 3.0 in Windows)    (ID: 300900813)
[Minor] 3009008: Security Advisory: Vulnerability in SSL 3.0 Could Allow
Information Disclosure - Disable Workaround for Server Software (Disable
SSL 3.0 in Windows)    (ID: 300900809)
[Minor] 3009008: Security Advisory: Vulnerability in SSL 3.0 Could Allow
Information Disclosure - Disable Workaround for IE Settings (Disable SSL
3.0 in Internet Explorer)    (ID: 300900817)
[Minor] 3009008: Security Advisory: Vulnerability in SSL 3.0 Could Allow
Information Disclosure - Disable Workaround for IE Settings (Disable SSL
3.0 and enable TLS 1.0, TLS 1.1, and TLS 1.2 in Internet Explorer)    (ID:
300900805)
[Minor] MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP
Service Could Allow Denial of Service - Microsoft Exchange Server 2007 SP1
(x64)    (ID: 1002421)
[Minor] MS10-105: Vulnerabilities in Microsoft Office Graphics Filters
Could Allow for Remote Code Execution - Office 2010 x64    (ID: 1010521)
[Minor] MS10-105: Vulnerabilities in Microsoft Office Graphics Filters
Could Allow for Remote Code Execution - Office 2010    (ID: 1010516)
[Minor] MS10-035: Cumulative Security Update for Internet Explorer - IE
5.01 SP4 - Windows 2000 SP4 - CORRUPT PATCH    (ID: 1003502)
[Minor] MS10-035: Cumulative Security Update for Internet Explorer - IE
5.01 SP4 - Windows 2000 SP4    (ID: 1003501)
[Minor] MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP
Service Could Allow Denial of Service - Microsoft Exchange Server 2010
(x64) - CORRUPT PATCH    (ID: 1002426)
[Minor] MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP
Service Could Allow Denial of Service - Microsoft Exchange Server 2010
(x64)    (ID: 1002425)
[Minor] MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP
Service Could Allow Denial of Service - Microsoft Exchange Server 2007 SP1
(x64) - CORRUPT PATCH    (ID: 1002422)
[Minor] MS13-035: Vulnerability in HTML Sanitization Component Could Allow
Elevation of Privilege - InfoPath 2010 SP1 (32-bit editions) (KB2687422)
(ID: 1303501)
[Minor] MS13-035: Vulnerability in HTML Sanitization Component Could Allow
Elevation of Privilege - InfoPath 2010 SP1 (32-bit editions) (KB2760406)
(ID: 1303503)
[Minor] MS12-034: Combined Security Update for Microsoft Office,
Windows, .NET Framework, and Silverlight - Microsoft .NET Framework 3.5.1 -
Windows 7 / Windows Server 2008 R2 Gold (x64)    (ID: 1203495)
[Minor] MS12-034: Combined Security Update for Microsoft Office,
Windows, .NET Framework, and Silverlight - Microsoft .NET Framework 3.5.1 -
Windows 7 Gold    (ID: 1203491)
[Minor] MS09-037: Vulnerabilities in Microsoft Active Template Library
(ATL) Could Allow Remote Code Execution - MSWebDVD ActiveX Control -
Windows XP SP2 (x64) - CORRUPT PATCH    (ID: 903736)
[Minor] MS09-037: Vulnerabilities in Microsoft Active Template Library
(ATL) Could Allow Remote Code Execution - MSWebDVD ActiveX Control -
Windows XP SP2 (x64)    (ID: 903735)
[Minor] MS09-037: Vulnerabilities in Microsoft Active Template Library
(ATL) Could Allow Remote Code Execution - DHTML Editing Component ActiveX
Control - Windows XP SP2 (x64) - CORRUPT PATCH    (ID: 903734)
[Minor] MS09-037: Vulnerabilities in Microsoft Active Template Library
(ATL) Could Allow Remote Code Execution - DHTML Editing Component ActiveX
Control - Windows XP SP2 (x64)    (ID: 903733)
[Minor] MS09-037: Vulnerabilities in Microsoft Active Template Library
(ATL) Could Allow Remote Code Execution - Windows Media Player 11- Windows
XP SP2 (x64)    (ID: 903729)
[Minor] MS09-037: Vulnerabilities in Microsoft Active Template Library
(ATL) Could Allow Remote Code Execution - Windows Media Player 10 - Windows
XP SP2 (x64) - CORRUPT PATCH    (ID: 903728)
[Minor] MS09-037: Vulnerabilities in Microsoft Active Template Library
(ATL) Could Allow Remote Code Execution - Windows Media Player 10 - Windows
XP SP2 (x64)    (ID: 903727)
[Minor] MS13-091: Vulnerabilities in Microsoft Office Could Allow Remote
Code Execution - Office 2010 SP1/SP2 (proofing tools)(2760781) (Superseded)
(ID: 1309107)
[Minor] MS11-044: Vulnerability in .NET Framework Could Allow Remote Code
Execution - Microsoft .NET Framework 2.0 SP2 / 3.5 SP1 - Windows Vista
SP1 / Windows Server 2008 (x64)    (ID: 1104421)
[Minor] MS11-044: Vulnerability in .NET Framework Could Allow Remote Code
Execution - Microsoft .NET Framework 2.0 SP1 / 3.5 - Windows Vista SP1 and
Windows Server 2008 (x64)    (ID: 1104419)
[Minor] MS11-044: Vulnerability in .NET Framework Could Allow Remote Code
Execution - Microsoft .NET Framework 2.0 SP2 / 3.5 SP1 - Windows Vista SP1
and Windows Server 2008    (ID: 1104415)
[Minor] MS11-044: Vulnerability in .NET Framework Could Allow Remote Code
Execution - Microsoft .NET Framework 2.0 SP1 / 3.5  - Windows Vista SP1 and
Windows Server 2008    (ID: 1104413)
[Minor] MS11-044: Vulnerability in .NET Framework Could Allow Remote Code
Execution - Microsoft .NET Framework 2.0 SP1 / 3.5 Gold - Windows XP SP2
and Windows Server 2003 SP2 (x64)    (ID: 1104409)
[Minor] MS11-044: Vulnerability in .NET Framework Could Allow Remote Code
Execution - Microsoft .NET Framework 2.0 SP1 / 3.5 Gold - Windows XP SP3
and Windows Server 2003 SP2    (ID: 1104403)
[Minor] MS11-043: Vulnerability in SMB Client Could Allow Remote Code
Execution - Windows Server 2008 R2 Gold (x64) (v2, republished 8/9/2011)
(ID: 1104343)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
Server 2008 Gold/SP2 (x64)    (ID: 1103135)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
Server 2008 Gold/SP2    (ID: 1103131)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
Vista SP1/SP2 (x64)    (ID: 1103127)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.8 and VBScript 5.8 - Windows
Vista SP1/SP2    (ID: 1103125)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
Server 2003 SP2 (x64) - CORRUPT PATCH    (ID: 1103120)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
Server 2003 SP2 (x64)    (ID: 1103119)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.6 and VBScript 5.6 - Windows
Server 2003 SP2 (x64) - CORRUPT PATCH    (ID: 1103118)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.6 and VBScript 5.6 - Windows
Server 2003 SP2 (x64)    (ID: 1103117)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.8 and VBScript 5.8 - Windows
Server 2003 SP2 - CORRUPT PATCH    (ID: 1103116)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.8 and VBScript 5.8 - Windows
Server 2003 SP2    (ID: 1103115)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
Server 2003 SP2 - CORRUPT PATCH    (ID: 1103114)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
Server 2003 SP2    (ID: 1103113)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.6 and VBScript 5.6 - Windows
Server 2003 SP2 - CORRUPT PATCH    (ID: 1103112)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.6 and VBScript 5.6 - Windows
Server 2003 SP2    (ID: 1103111)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
XP SP2 (x64) - CORRUPT PATCH    (ID: 1103108)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
XP SP2 (x64)    (ID: 1103107)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.6 and VBScript 5.6 - Windows
XP SP2 (x64) - CORRUPT PATCH    (ID: 1103106)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.6 and VBScript 5.6 - Windows
XP SP2 (x64)    (ID: 1103105)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.8 and VBScript 5.8 - Windows
XP SP3 - CORRUPT PATCH    (ID: 1103104)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.8 and VBScript 5.8 - Windows
XP SP3    (ID: 1103103)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
XP SP3 - CORRUPT PATCH    (ID: 1103102)
[Minor] MS11-031: Vulnerability in JScript and VBScript Scripting Engines
Could Allow Remote Code Execution - JScript 5.7 and VBScript 5.7 - Windows
XP SP3    (ID: 1103101)
[Minor] MS10-039: Vulnerabilities in Microsoft SharePoint Could Allow
Elevation of Privilege - SharePoint Services 3.0 SP1 (x64)    (ID: 1003931)
[Minor] MS10-039: Vulnerabilities in Microsoft SharePoint Could Allow
Elevation of Privilege - Sharepoint Services 3.0 SP1    (ID: 1003926)
[Minor] MS09-026: Vulnerability in RPC Could Allow Elevation of Privilege -
Windows Server 2008 Gold    (ID: 902615)
[Minor] MS08-052: Vulnerabilities in GDI+ Could Allow Remote Code Execution
- Office 2003 SP2 (Administrative Installation)    (ID: 805218)
[Minor] MS08-052: Vulnerabilities in GDI+ Could Allow Remote Code Execution
- Office 2003 SP2(Local/Network Installation)    (ID: 805216)
[Minor] MS13-091: Vulnerabilities in Microsoft Office Could Allow Remote
Code Execution - Office 2013 (file format converters) (x64)    (ID:
1309115)
[Minor] MS13-091: Vulnerabilities in Microsoft Office Could Allow Remote
Code Execution - Office 2013 (file format converters)    (ID: 1309113)


Reason for Update:
Fixlet message for MS11-049 was updated due to relevance false positive.
Fixlet messages for Security Advisory 3009008 were updated to better
describe the function of the Fixlet.
Fixlets were updated for missing CVE fields.


Actions to Take:

None


Published site version:

Patches for Windows (English), version 2213.


Additional links:

None


Application Engineering Team
IBM Endpoint Manager
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20150402/222c82d3/attachment.html>


More information about the Besadmin-announcements mailing list