Information Technology Services

Microsoft updates multiple security bulletins

ALARM Group ALERT - click for a description of ALARM, The Computing Alert System
Alert Number: 081706-01
Alert Date: 8/17/06
Alert Title:  Microsoft updates multiple security bulletins
Update-to:
080806-01 "Microsoft releases security bulletin for August"
071106-01 "Microsoft releases security bulletin for July"
OS/Platform/Application:
**Updated Bulletin MS06-042:**
Microsoft Internet Explorer 6.0 Service Pack 1, when used with:
Microsoft Windows XP (Professional and Home Editions)
Microsoft Windows 2000 (Professional Edition, Service Pack 4, and Advanced Server)

Updated Bulletin MS06-051:
Microsoft Windows XP (including Service Packs 1 and 2, and professional x64 Edition)
Microsoft Windows Server 2003 (including Service Pack 1, also on Itanium-based systems)
Microsoft Windows 2000 Service Pack 4

Updated Bulletin MS06-047:
Microsoft Office 2000 Service Pack 3
Microsoft Project 2000 Service Release 1
Microsoft Access 2000 Runtime Service Pack 3
Microsoft Office XP Service Pack 3
Microsoft Project 2002 Service Pack 1
Microsoft Visio 2002 Service Pack 2
Microsoft Works Suite (2004, 2005, 2006)
Microsoft Visual Basic for Applications (SDK 6.0, 6.2, 6.3, 6.4)

Updated Bulletin MS06-038:
Microsoft Office 2003 (Service Pack 1 or Service Pack 2)
Microsoft Office XP Service Pack 3
Microsoft Office 2000 Service Pack 3
Microsoft Access (2000, 2002, 2003)
Microsoft Excel (2000, 2002, 2003-including viewer)
Microsoft FrontPage (2000, 2002, 2003)
Microsoft InfoPath 2003
Microsoft OneNote 2003
Microsoft Outlook (2000, 2003)
Microsoft PowerPoint (2000, 2002, 2003)
Microsoft Project (2000 Service Release 1, 2002 Service Pack 1, 2003)
Microsoft Publisher (2000, 2002, 2003)
Microsoft Visio (2002-including Service Pack 2, 2003)
Microsoft Word (2000, 2002, 2003-including viewer)
Microsoft Outlook 2002
Microsoft Office 2004 for Mac
Microsoft Office v. X for Mac

Attention: Windows and Mac System Administrators, Desktop Support Personnel

Summary: On August 15 2006 Microsoft released updated versions of four security bulletins. The update of MS06-042 is important because it addresses a stability problem with Internet Explorer 6.0 SP1 on Windows XP and 2000 systems. Microsoft has been made aware of a problem experienced by some systems with the above-mentioned configuration after applying the MS06-042 update and has changed the caveats associated with this release and created knowledge base article KB923762 to describe the symptoms and provide a temporary hotfix for the issue. The vendor states that the bulletin will be re-released by August 22 2006 (and will include a definitive fix for the issue at that time).

The remainder of updates are primarily data clarification issues. A summary of the updated information is listed below:

MS06-051: File Information updated for Windows 2003 in the “Security Update Section”.
MS06-047: Bulletin updated the “Deployment Information” for “Microsoft Visual Basic for Applications” under Security Update Information” Section.
MS06-038: Bulletin updated ”Client Installation File Information” and “Administrative Installation File Information” for Office 2003 and Office XP in the “Security Update Section”. Provided additional clarity around “What updates does this release replace?” regarding MS05-005 for Office XP.

Recommended Actions: The primary symptom associated with MS06-042 is the sudden and unexpected exit of the Internet Explorer application upon visiting a certain (HTTP 1.1) websites. Windows System Administrators and other Support Personnel who receive reports of unexpected browser behavior on systems that were recently updated are encouraged to read the information associated with this issue (links provided below) as they may provide troubleshooting help. Windows and Mac system administrators are also encouraged to revisit bulletins MS06-051, MS06-047, and MS06-038 at their convenience to obtain updated information on these issues.

ITS Actions: No additional actions are currently being undertaken by ITS to address
these updates.

MS06-042 Resources:

KB923762:
http://support.microsoft.com/kb/923762/

Microsoft Technet Blog pertaining to MS06-042 issue:
http://blogs.technet.com/msrc/archive/2006/08/16/447023.aspx

SANS Handler's diary on MS06-042 issue:
http://isc.sans.org/diary.php?storyid=1604

Network World article on MS06-042 issue:
http://www.networkworld.com/nlsecuritynewsal44053

Security Bulletin MS06-042:
http://www.microsoft.com/technet/security/bulletin/ms06-042.mspx

MS06-051 Resources:
Security Bulletin MS06-051:
http://www.microsoft.com/technet/security/Bulletin/MS06-051.mspx

MS06-047 Resources:
Security Bulletin MS06-047:
http://www.microsoft.com/technet/security/Bulletin/MS06-047.mspx

MS06-038 Resources:
Security Bulletin MS06-038:
http://www.microsoft.com/technet/security/Bulletin/MS06-038.mspx

Information Technology Services University at Albany, SUNY 1400 Washington Avenue Albany, NY 12222 ITS Service Centers: 518-442-4000	University at Albany Home Page Contact UAlbany \| Directories \| Calendars \| Visitors \| Site Index \| Search Admissions \| Academics \| Research \| IT Services \| Libraries \| Athletics
Internet Privacy Policy IT Policies