ALARM Group ALERT - click for a description of ALARM, The Computing Alert System Alert Number:  071307-01 Alert Date:  07/13/07 Alert Title:  Microsoft changes MS07-036 to include MS Office on Windows and Mac Update-to:   071007-01 "Microsoft security bulletin release for July" OS/Platform/Application:  Microsoft Office 2004 for Mac 2007 Microsoft Office System Microsoft Office XP Service Pack 3 Microsoft Office 2003 Service Pack 2 Microsoft Office 2000 Service Pack 3 Category:  ALERT Severity: HIGH Attention:  Windows and Mac system Administrators, Desktop Support Personnel, Windows and Mac Users

Summary:  On July 12 2007 Microsoft updated security bulletin MS07-036 to include Microsoft Office 2004 on Mac and Microsoft Office Service Pack 3 on Windows XP/2003/2000.  Bulletin MS07-036 was originally released as part of the monthly security bulletin package on July 10.  This bulletin deals with a vulnerability in the handling/opening of maliciously-crafted Excel files that could result in remote code execution.  The vendor has rated this vulnerability as "critical" severity on Microsoft Office 2000 Service Pack 3 systems and "Important" on all others listed above.

Recommended Actions:   Windows and Mac System Administrators/users affected by this update are encouraged to read the security bulletin and (if appropriate) install it at their earliest convenience.

ITS Actions:  ITS Systems Management and Operations Staff will apply all necessary patches to the appropriate ITS servers as part of the next scheduled system update.

Resources:

Microsoft Security Bulletin MS07-036:
http://www.microsoft.com/technet/security/bulletin/ms07-036.mspx