Recently Published

November 2008

Security Bulletins

• Microsoft Security Bulletin Summary for November 2008
  
• Microsoft Security Bulletin MS08-069
  

  Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218)

• Microsoft Security Bulletin MS08-068
  

  Vulnerability in SMB Could Allow Remote Code Execution (957097)

October 2008

Security Bulletins

• Microsoft Security Bulletin Summary for October 2008
  
• Microsoft Security Bulletin MS08-067
  

  Vulnerability in Server Service Could Allow Remote Code Execution (958644)

• Microsoft Security Bulletin MS08-066
  

  Vulnerability in the Microsoft Ancillary Function Driver Could Allow Elevation of Privilege (956803)

• Microsoft Security Bulletin MS08-065
  

  Vulnerability in Message Queuing Could Allow Remote Code Execution (951071)

• Microsoft Security Bulletin MS08-064
  

  Vulnerability in Virtual Address Descriptor Manipulation Could Allow Elevation of Privilege (956841)

• Microsoft Security Bulletin MS08-063
  

  Vulnerability in SMB Could Allow Remote Code Execution (957095)

• Microsoft Security Bulletin MS08-062
  

  Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution (953155)

• Microsoft Security Bulletin MS08-061
  

  Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (954211)

• Microsoft Security Bulletin MS08-060
  

  Vulnerability in Active Directory Could Allow Remote Code Execution (957280)

• Microsoft Security Bulletin MS08-059
  

  Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution (956695)

• Microsoft Security Bulletin MS08-058
  

  Cumulative Security Update for Internet Explorer (956390)

• Microsoft Security Bulletin MS08-057
  

  Vulnerability in Microsoft Office Could Allow Information Disclosure (957699)

• Microsoft Security Bulletin MS08-056
  

  Vulnerability in Message Queuing Could Allow Remote Code Execution (951071)

Other Security-Related Content

• Learning Path: Securing the Client Infrastructure
  

September 2008

Security Bulletins

• Microsoft Security Bulletin Summary for September 2008
  
• Microsoft Security Bulletin MS08-055
  

  Vulnerability in Microsoft Office Could Allow Remote Code Execution (955047)

• Microsoft Security Bulletin MS08-054
  

  Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)

• Microsoft Security Bulletin MS08-053
  

  Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution (954156)

• Microsoft Security Bulletin MS08-052
  

  Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593)

Other Security-Related Content

• Reducing Application Complexity with Virtualization
  

August 2008

Security Bulletins

• Microsoft Security Bulletin Summary for August 2008
  
• Microsoft Security Bulletin MS08-051
  

  Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (949785)

• Microsoft Security Bulletin MS08-050
  

  Vulnerability in Windows Messenger Could Allow Information Disclosure (955702)

• Microsoft Security Bulletin MS08-049
  

  Vulnerabilities in Event System Could Allow Remote Code Execution (950974)

• Microsoft Security Bulletin MS08-048
  

  Security Update for Outlook Express and Windows Mail (951066)

• Microsoft Security Bulletin MS08-047
  

  Vulnerability in IPsec Policy Processing Could Allow Information Disclosure (953733)

• Microsoft Security Bulletin MS08-046
  

  Vulnerability in Microsoft Windows Image Color Management System Could Allow Remote Code Execution (952954)

• Microsoft Security Bulletin MS08-045
  

  Cumulative Security Update for Internet Explorer (953838)

• Microsoft Security Bulletin MS08-044
  

  Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (924090)

• Microsoft Security Bulletin MS08-043
  

  Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (954066)

• Microsoft Security Bulletin MS08-042
  

  Vulnerability in Microsoft Word Could Allow Remote Code Execution (955048)

• Microsoft Security Bulletin MS08-041
  

  Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

Other Security-Related Content

• Managing Controlled Partner Access and Outsourcing
  

July 2008

Security Bulletins

• Microsoft Security Bulletin Summary for July 2008
  
• Microsoft Security Bulletin MS08-040
  

  Vulnerabilities in Microsoft SQL Server Could Allow Elevation of Privilege (941203)

• Microsoft Security Bulletin MS08-039
  

  Vulnerabilities in Outlook Web Access for Exchange Server Could Allow Elevation of Privilege (953747)

• Microsoft Security Bulletin MS08-038
  

  Vulnerability in Windows Explorer Could Allow Remote Code Execution (950582)

• Microsoft Security Bulletin MS08-037
  

  Vulnerabilities in DNS Could Allow Spoofing (953230)

Other Security-Related Content

• Identifying the Changing Threat Landscape
  
• Security Viewpoint – July 2008
  

  Inside the Windows Vista Kernel

June 2008

Security Bulletins

• Microsoft Security Bulletin Summary for June 2008
  
• Microsoft Security Bulletin MS08-036
  

  Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762)

• Microsoft Security Bulletin MS08-035
  

  Vulnerability in Active Directory Could Allow Denial of Service (953235)

• Microsoft Security Bulletin MS08-034
  

  Vulnerability in WINS Could Allow Elevation of Privilege (948745)

• Microsoft Security Bulletin MS08-033
  

  Vulnerabilities in DirectX Could Allow Remote Code Execution (951698)

• Microsoft Security Bulletin MS08-032
  

  Cumulative Security Update of ActiveX Kill Bits (950760)

• Microsoft Security Bulletin MS08-031
  

  Cumulative Security Update for Internet Explorer (950759)

• Microsoft Security Bulletin MS08-030
  

  Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (951376)

Other Security-Related Content

• Simplifying the Management of Your Network Security
  
• Viewpoint - June 2008
  

  Understanding Defense in Depth

• Security MVP Article of the Month - June 2008
  

  Defense in Depth Using Microsoft Security Products and Solutions

May 2008

Security Bulletins

• Microsoft Security Bulletin Summary for May 2008
  
• Microsoft Security Bulletin MS08-029
  

  Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service (952044)

• Microsoft Security Bulletin MS08-028
  

  Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution (950749)

• Microsoft Security Bulletin MS08-027
  

  Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208)

• Microsoft Security Bulletin MS08-026
  

  Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (951207)

Other Security-Related Content

• Improving Database Security with SQL Server 2008
  
• Viewpoint - May 2008
  

  Security and Privacy: Twins of Different Mothers

• Security MVP Article of the Month - May 2008
  

  Privacy Issues - Business Disabler or Enabler?

April 2008

Security Bulletins

• Microsoft Security Bulletin Summary for April 2008
  
• Microsoft Security Bulletin MS08-025
  

  Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

• Microsoft Security Bulletin MS08-024
  

  Cumulative Security Update for Internet Explorer (947864)

• Microsoft Security Bulletin MS08-023
  

  Security Update of ActiveX Kill Bits (948881)

• Microsoft Security Bulletin MS08-022
  

  Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338)

• Microsoft Security Bulletin MS08-021
  

  Vulnerabilities in GDI Could Allow Remote Code Execution (948590)

• Microsoft Security Bulletin MS08-020
  

  Vulnerability in DNS Client Could Allow Spoofing (945553)

• Microsoft Security Bulletin MS08-019
  

  Vulnerability in Microsoft Visio Could Allow Remote Code Execution (949032)

• Microsoft Security Bulletin MS08-018
  

  Vulnerability in Microsoft Project Could Allow Remote Code Execution (950183)

Other Security-Related Content

• Securing Your Environment with Microsoft Forefront
  
• Microsoft BlueHat Security Briefings: Spring 2008 Sessions
  
• Security MVP Article of the Month - April 2008
  

  Security and Application Development in SharePoint: First Steps

• Security Tip of the Month - April 2008
  

  Laying the Foundation for the Microsoft Security Development Lifecycle: Implementing the Principles

• Viewpoint - April 2008
  

  Building Security into Windows Vista and the Microsoft Culture

March 2008

Security Bulletins

• Microsoft Security Bulletin Summary for March 2008
  
• Microsoft Security Bulletin MS08-017
  

  Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (933103)

• Microsoft Security Bulletin MS08-016
  

  Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030)

• Microsoft Security Bulletin MS08-015
  

  Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031)

• Microsoft Security Bulletin MS08-014
  

  Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029)

Other Security-Related Content

• Securing Your Environment by Collaborating Effectively
  
• Viewpoint - March 2008
  

  Providing Defense in Depth for Your Desktop Deployment Projects

• Security Tip of the Month - March 2008
  

  Initial Considerations for Secure Deployment

February 2008

Security Bulletins

• Microsoft Security Bulletin Summary for February 2008
  
• Microsoft Security Bulletin MS08-013
  

  Vulnerability in Microsoft Office Could Allow Remote Code Execution (947108)

• Microsoft Security Bulletin MS08-012
  

  Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution (947085)

• Microsoft Security Bulletin MS08-011
  

  Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)

• Microsoft Security Bulletin MS08-010
  

  Cumulative Security Update for Internet Explorer (944533)

• Microsoft Security Bulletin MS08-009
  

  Vulnerability in Microsoft Word Could Allow Remote Code Execution (947077)

• Microsoft Security Bulletin MS08-008
  

  Vulnerability in OLE Automation Could Allow Remote Code Execution (947890)

• Microsoft Security Bulletin MS08-007
  

  Vulnerability in WebDAV Mini-Redirector Could Allow Remote Code Execution (946026)

• Microsoft Security Bulletin MS08-006
  

  Vulnerability in Internet Information Services Could Allow Remote Code Execution (942830)

• Microsoft Security Bulletin MS08-005
  

  Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831)

• Microsoft Security Bulletin MS08-004
  

  Vulnerability in Windows TCP/IP Could Allow Denial of Service (946456)

• Microsoft Security Bulletin MS08-003
  

  Vulnerability in Active Directory Could Allow Denial of Service (946538)

Other Security-Related Content

• Windows Server 2008: Security Overview
  
• Viewpoint - February 2008
  

  Supporting Your Family, Friends, and Neighbors

• Security MVP Article of the Month - February 2008
  

  Serving as Unofficial Security Support for Family and Friends

January 2008

Security Bulletins

• Microsoft Security Bulletin Summary for January 2008
  
• Microsoft Security Bulletin MS08-002
  

  Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485)

• Microsoft Security Bulletin MS08-001
  

  Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)

Other Security-Related Content

• Improving Network Compliance with Windows Server 2008 Network Access Protection
  
• Security MVP Article of the Month - January 2008
  

  Improve Security Through Meaningful Security Policies

• Viewpoint - January 2008
  

  Security Policies in the Application Development Process

December 2007

Security Bulletins

• Microsoft Security Bulletin Summary for December 2007
  
• Microsoft Security Bulletin MS07-069
  

  Cumulative Security Update for Internet Explorer (942615)

• Microsoft Security Bulletin MS07-068
  

  Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 and 944275)

• Microsoft Security Bulletin MS07-067
  

  Vulnerability in Macrovision Driver Could Allow Local Elevation of Privilege (944653)

• Microsoft Security Bulletin MS07-066
  

  Vulnerability in Windows Kernel Could Allow Elevation of Privilege (943078)

• Microsoft Security Bulletin MS07-065
  

  Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)

• Microsoft Security Bulletin MS07-064
  

  Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)

• Microsoft Security Bulletin MS07-063
  

  Vulnerability in SMBv2 Could Allow Remote Code Execution (942624)

Other Security-Related Content

• Securing the Desktop Infrastructure
  
• Security MVP Article of the Month - December 2007
  

  Windows Server 2008 in an Organization's Defense in Depth Strategy

• Viewpoint - December 2007
  

  Server Security: Less is More

November 2007

Security Bulletins

• Microsoft Security Bulletin Summary for November 2007
  
• Microsoft Security Bulletin MS07-062
  

  Vulnerability in DNS Could Allow Spoofing (941672)

• Microsoft Security Bulletin MS07-061
  

  Vulnerability in Windows URI Handling Could Allow Remote Code Execution (943460)

Other Security-Related Content

• 2007 Microsoft Office Security Guide
  
• Managing Your Remote Devices
  
• Security MVP Article of the Month - November 2007
  

  Top 5 Exchange Server 2007 Security Best Practices

• Viewpoint - November 2007
  

  Risky Business: The Mobile Device Security Disconnect

• Security Tip of the Month - November 2007
  

  Anywhere Access and Mobile Security

October 2007

Security Bulletins

• Microsoft Security Bulletin Summary for October 2007
  
• Microsoft Security Bulletin MS07-060
  

  Vulnerability in Microsoft Word Could Allow Remote Code Execution (942695)

• Microsoft Security Bulletin MS07-059
  

  Vulnerability in Windows SharePoint Services 3.0 and Office SharePoint Server 2007 Could Result in Elevation of Privilege Within the SharePoint Site (942017)

• Microsoft Security Bulletin MS07-058
  

  Vulnerability in RPC Could Allow Denial of Service (933729)

• Microsoft Security Bulletin MS07-057
  

  Cumulative Security Update for Internet Explorer (939653)

• Microsoft Security Bulletin MS07-056
  

  Security Update for Outlook Express and Windows Mail (941202)

• Microsoft Security Bulletin MS07-055
  

  Vulnerability in Kodak Image Viewer Could Allow Remote Code Execution (923810)

Other Security-Related Content

• Protecting Your Data Records
  
• Security MVP Article of the Month - October 2007
  

  Be Secure When Interoping

• Viewpoint - October 2007
  

  When It Comes to Protection from Vulnerabilities, Process Trumps “Many Eyes”

• Security Tip of the Month - October 2007
  

  Securing the Gateway to Your Enterprise: Web Services

September 2007

Security Bulletins

• Microsoft Security Bulletin Summary for September 2007
  
• Microsoft Security Bulletin MS07-054
  

  Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution (942099)

• Microsoft Security Bulletin MS07-053
  

  Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)

• Microsoft Security Bulletin MS07-052
  

  Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution (941522)

• Microsoft Security Bulletin MS07-051
  

  Vulnerability in Microsoft Agent Could Allow Remote Code Execution (938827)

Other Security-Related Content

• Managing Updates and Safeguarding Your Systems
  
• Microsoft BlueHat Security Briefings: Fall 2007 Sessions and Interviews
  
• Security MVP Article of the Month - September 2007
  

  Time-Based Blind SQL Injection with Heavy Queries

• Viewpoint - September 2007
  

  The “De-perimeterization” of Networks

• Security Tip of the Month - September 2007
  

  Adding “Kick” to Your Remote Access Security Policies with Intelligent Application Gateway 2007

August 2007

Security Bulletins

• Microsoft Security Bulletin Summary for August 2007
  
• Microsoft Security Bulletin MS07-050
  

  Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127)

• Microsoft Security Bulletin MS07-049
  

  Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

• Microsoft Security Bulletin MS07-048
  

  Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)

• Microsoft Security Bulletin MS07-047
  

  Vulnerability in Windows Media Player Could Allow Remote Code Execution (936782)

• Microsoft Security Bulletin MS07-046
  

  Vulnerability in GDI Could Allow Remote Code Execution (938829)

• Microsoft Security Bulletin MS07-045
  

  Cumulative Security Update for Internet Explorer (937143)

• Microsoft Security Bulletin MS07-044
  

  Vulnerability in Microsoft Excel Could Allow Remote Code Execution (940965)

• Microsoft Security Bulletin MS07-043
  

  Vulnerability in OLE Automation Could Allow Remote Code Execution (921503)

• Microsoft Security Bulletin MS07-042
  

  Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (936227)

Other Security-Related Content

• Protecting Your Sensitive Data from Malware
  
• Security MVP Article of the Month - August 2007
  

  Role of Security in Infrastructure Optimization

• Viewpoint - August 2007
  

  Securing Data in Hosted Applications

• Security Tip of the Month - August 2007
  

  User Account Control and SQL Server

July 2007

Security Bulletins

• Microsoft Security Bulletin Summary for July 2007
  
• Microsoft Security Bulletin MS07-041
  

  Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution (939373)

• Microsoft Security Bulletin MS07-040
  

  Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212)

• Microsoft Security Bulletin MS07-039
  

  Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122)

• Microsoft Security Bulletin MS07-038
  

  Vulnerability in Windows Vista Firewall Could Allow Information Disclosure (935807)

• Microsoft Security Bulletin MS07-037
  

  Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (936548)

• Microsoft Security Bulletin MS07-036
  

  Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (936542)

Other Security-Related Content

• Security Researcher Acknowledgments for Microsoft Online Services
  
• Security Guidance for Windows Server Update Services (WSUS)
  
• Malware Removal Starter Kit
  
• Managing Network Security Challenges
  
• Security MVP Article of the Month - July 2007
  

  Security Is a Business Requirement

• Viewpoint - July 2007
  

  Who Can You Trust to Help You Secure and Manage Your Microsoft IT Infrastructure?

• Security Tip of the Month - July 2007
  

  Six Easy Pieces for Computer Security

June 2007

Security Bulletins

• Microsoft Security Bulletin Summary for June 2007
  
• Microsoft Security Bulletin MS07-035
  

  Vulnerability in Win32 API Could Allow Remote Code Execution (935839)

• Microsoft Security Bulletin MS07-034
  

  Cumulative Security Update for Outlook Express and Windows Mail (929123)

• Microsoft Security Bulletin MS07-033
  

  Cumulative Security Update for Internet Explorer (933566)

• Microsoft Security Bulletin MS07-032
  

  Vulnerability in Windows Vista Could Allow Information Disclosure (931213)

• Microsoft Security Bulletin MS07-031
  

  Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution (935840)

• Microsoft Security Bulletin MS07-030
  

  Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (927051)

Other Security-Related Content

• Security MVP Article of the Month - June 2007
  

  Securing Sensitive Information: Protecting Your Network Against Information Leakage

• Viewpoint - June 2007
  

  Protect Your Data-Everything Else Is Just Plumbing

• Security Tip of the Month - June 2007
  

  Read the EULA.... No, Really Read It

• Windows Server 2008 Security Guide: Executive Overview
  
• Reducing the Challenges and Complexities of Identity and Access Management
  

May 2007

Security Bulletins

• Microsoft Security Bulletin Summary for May 2007
  
• Microsoft Security Bulletin MS07-029
  

  Vulnerability in RPC on Windows DNS Server Could Allow Remote Code Execution (935966)

• Microsoft Security Bulletin MS07-028
  

  Vulnerability in CAPICOM Could Allow Remote Code Execution (931906)

• Microsoft Security Bulletin MS07-027
  

  Cumulative Security Update for Internet Explorer (931768)

• Microsoft Security Bulletin MS07-026
  

  Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (931832)

• Microsoft Security Bulletin MS07-025
  

  Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873)

• Microsoft Security Bulletin MS07-024
  

  Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232)

• Microsoft Security Bulletin MS07-023
  

  Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (934233)

Other Security-Related Content

• Security MVP Article of the Month - May 2007
  

  Security Acumen: Business First

• Viewpoint - May 2007
  

  Enabling a Strategic IT Infrastructure with Microsoft Forefront and Microsoft System Center

• Security Tip of the Month - May 2007
  

  Improving Management of Client Anti-Malware Solutions

• Security Process Map
  
• Data Encryption Toolkit for Mobile PCs: Planning and Implementation Guide
  
• Data Encryption Toolkit for Mobile PCs: Microsoft Encrypting File System Assistant
  
• Microsoft BlueHat Security Briefings: Spring 2007 Sessions and Interviews
  
• Simplifying Security Infrastructure with Microsoft Forefront
  

April 2007

Security Bulletins

• Microsoft Security Bulletin Summary for April 2007
  
• Microsoft Security Bulletin MS07-022
  

  Vulnerability in Windows Kernel Could Allow Elevation of Privilege (931784)

• Microsoft Security Bulletin MS07-021
  

  Vulnerabilities in CSRSS Could Allow Remote Code Execution (930178)

• Microsoft Security Bulletin MS07-020
  

  Vulnerability in Microsoft Agent Could Allow Remote Code Execution (932168)

• Microsoft Security Bulletin MS07-019
  

  Vulnerability in Universal Plug and Play Could Allow Remote Code Execution (931261)

• Microsoft Security Bulletin MS07-018
  

  Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939)

• Microsoft Security Bulletin MS07-017
  

  Vulnerabilities in GDI Could Allow Remote Code Execution (925902)

Other Security-Related Content

• Security MVP Article of the Month - April 2007
  

  Reliable Repositories: Using Microsoft Forefront Security for SharePoint to Defend Collaboration

• Viewpoint - April 2007
  

  A Fresh Look at Compliance in SharePoint Server 2007

• Security Tip of the Month - April 2007
  

  Making SharePoint Resources Safe for Remote Workers

• Data Encryption Toolkit for Mobile PCs - Security Analysis
  
• Securing Internal and External Access to Corporate Resources
  

  These resources give you in-depth guidance on solutions for securing access to your organization's network resources.

March 2007

Security Bulletins

• Microsoft Security Bulletin Summary for March 2007
  

Other Security-Related Content

• Security MVP Article of the Month - March 2007
  

  Malicious Software: One Person's Perspective

• Viewpoint - March 2007
  

  Malware Revolution: A Change in Target

• Security Tip of the Month - March 2007
  

  Why Create a Security Incident Response Process

• Microsoft Office Visio 2007 Connector for the Microsoft Baseline Security Analyzer (MBSA) 2.0
  

  Available for MBSA 2.0, the connector lets you view the results of a Microsoft Baseline Security Analyzer scan in a clear, comprehensive Microsoft Office Visio 2007 network diagram.

• Securing Your Messaging Infrastructure
  

  These resources provide guidance on securing your messaging infrastructure, including best practices for message hygiene technologies and configuration strategies.

February 2007

Security Bulletins

• Microsoft Security Bulletin Summary for February 2007
  
• Microsoft Security Bulletin MS07-016
  

  Cumulative Security Update for Internet Explorer (928090)

• Microsoft Security Bulletin MS07-015
  

  Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554)

• Microsoft Security Bulletin MS07-014
  

  Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (929434)

• Microsoft Security Bulletin MS07-013
  

  Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution (918118)

• Microsoft Security Bulletin MS07-012
  

  Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667)

• Microsoft Security Bulletin MS07-011
  

  Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436)

• Microsoft Security Bulletin MS07-010
  

  Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution (932135)

• Microsoft Security Bulletin MS07-009
  

  Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution(927779)

• Microsoft Security Bulletin MS07-008
  

  Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)

• Microsoft Security Bulletin MS07-007
  

  Vulnerability in Windows Image Acquisition Service Could Allow Elevation of Privilege (927802)

• Microsoft Security Bulletin MS07-006
  

  Vulnerability in Windows Shell Could Allow Elevation of Privilege (928255)

• Microsoft Security Bulletin MS07-005
  

  Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (923723)

Other Security-Related Content

• Microsoft Baseline Security Analyzer 2.1
  
• Viewpoint - February 2007
  

  The Evolution of Identity

• Security MVP Article of the Month - February 2007
  

  Deploying RMS into a Large Enterprise

• Security Tip of the Month - February 2007
  

  Updating Your Deployment with RMS SP2

January 2007

Security Bulletins

• Microsoft Security Bulletin Summary for January 2007
  
• Microsoft Security Bulletin MS07-004
  

  Vulnerability in Vector Markup Language Could Allow Remote Code Execution (929969)

• Microsoft Security Bulletin MS07-003
  

  Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution (925938)

• Microsoft Security Bulletin MS07-002
  

  Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (927198)

• Microsoft Security Bulletin MS07-001
  

  Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution (921585)

Other Security-Related Content

• Viewpoint - January 2007
  

  Secure Mobile Applications – an Oxymoron?

• Security MVP Article of the Month - January 2007
  

  Understanding the Windows Mobile Security Model

• Security Tip of the Month - January 2007
  

  How to Set Up a Wireless Network with a Security Infrastructure

• Enabling Security Management through Active Directory Group Policy
  

  Use these resources for guidance on how to lock down your network to create an accessible yet flexible secured environment.

• Fundamental Computer Investigation Guide For Windows
  
• Data Encryption Toolkit for Mobile PCs - Overview
  

December 2006

Security Bulletins

• Microsoft Security Bulletin Summary for December 2006
  
• Microsoft Security Bulletin MS06-078
  

  Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689)

• Microsoft Security Bulletin MS06-077
  

  Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)

• Microsoft Security Bulletin MS06-076
  

  Cumulative Security Update for Outlook Express (923694)

• Microsoft Security Bulletin MS06-075
  

  Vulnerability in Windows Could Allow Elevation of Privilege (926255)

• Microsoft Security Bulletin MS06-074
  

  Vulnerability in SNMP Could Allow Remote Code Execution (926247)

• Microsoft Security Bulletin MS06-073
  

  Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution (925674)

• Microsoft Security Bulletin MS06-072
  

  Cumulative Security Update for Internet Explorer (925454)

Other Security-Related Content

• Improving the Intelligence of Your Gateway Security
  

  If you want to build a comprehensive SSL-secured access platform that will help you extend and manage the reach of your information systems, check out these resources and get in-depth guidance on edge solutions, including Microsoft Internet Security and Acceleration (ISA) Server 2006 and the Whale Intelligent Application Gateway (IAG).

• Security Viewpoint - December 2006
  

  Data Protection: The Convergence of Backup, Archive, and Disaster Recovery

• Security MVP Article of the Month - December 2006
  

  Data Recovery and Encrypting File System (EFS)

• Security Tip of the Month - December 2006
  

  Hardening Guide for Microsoft Windows Rights Management Services

November 2006

Security Bulletins

• Microsoft Security Bulletin Summary for November 2006
  
• Microsoft Security Bulletin MS06-071
  

  Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (928088)

• Microsoft Security Bulletin MS06-070
  

  Vulnerability in Workstation Service Could Allow Remote Code Execution (924270)

• Microsoft Security Bulletin MS06-069
  

  Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (923789)

• Microsoft Security Bulletin MS06-068
  

  Vulnerability in Microsoft Agent Could Allow Remote Code Execution (920213)

• Microsoft Security Bulletin MS06-067
  

  Cumulative Security Update for Internet Explorer (922760)