《十二月份资讯安全公告Dec.ppt》由会员分享，可在线阅读，更多相关《十二月份资讯安全公告Dec.ppt（37页珍藏版）》请在三一文库上搜索。
1、十二月份資訊安全公告 Dec 14, 2006,Richard Chen 陳政鋒 (Net+, Sec+, MCSE2003+Security, CISSP) 資深技術支援工程師 台灣微軟技術支援處,Questions and Answers,Submit text questions using the “Ask a Question” button,What We Will Cover,Recap Nov. releases known issues Review Dec. releases Other security resources Prepare for new WSUSSCAN
2、.CAB architecture IE 7 over AU Lifecycle Information Windows Malicious Software Removal Tool Resources Questions and answers,Recap Nov. Known issues and,MS06-066 Netware Get offering even no CSNW is installed: Normal proactive patching MS06-067 IE patch 3rd party AP compatibility issue, see KB922760
3、 MS06-069 Adobe Flash Player Re-offering, install the latest Flash Player to solve the issue MS06-070 Workstation service Worm vulnerability, install the patch immediately MS06-071 MSXML WSUS category/description error, fixing now. MSXML4 install failure, see KB927978,Dec 2006 Security Bulletins Sum
4、mary,On Dec 13: 7 New Security Bulletins 5 Windows (1 critical, 4 important) 1 Visual Studio (critical) 1 Media Player (critical) 1 re-release MS06-059 (critical) 5 High-priority non-security updates,November 2006 Security Bulletins Overview,December 2006 Security Bulletins Severity Summary,MS06-072
5、: Internet Explorer Critical,MS06-072: Internet Explorer Critical,MS06-073: WMI Object Broker- Critical,MS06-073: WMI Object Broker- Critical,MS06-073: WMI Object Broker- Critical,MS06-073: WMI Object Broker- Critical,MS06-074: SNMP - Important,MS06-074: SNMP - Important,MS06-075: File Manifest - Im
6、portant,MS06-075: File Manifest - Important,MS06-076: Outlook Express- Important,MS06-076: Outlook Express- Important,MS06-077: RIS - Important,MS06-077: RIS - Important,MS06-078: Windows Media Player - Critical,MS06-078: Windows Media Player - Critical,MS06-078: Windows Media Player - Critical,MS06
7、-078: Windows Media Player - Critical,Re-Release of MS06-059- Excel Critical,Install MS06-059 might fail if ALL conditions are true: Running Excel 2002 MSI 2.0 Previously installed MS06-037 Details: Basically, because the 059 patch does not contain the MSI 2.0 patch code for 037, installing Excel 20
8、02s 059 on top of 037 will trigger a Windows Installer 2.0 bug in some cases & result in excel.exe not getting updated to version 6816. Resolution: Install MS06-059 v2,Detection and Deployment,Other Update Information,December 2006 Non-Security Updates,New WSUSSCAN.CAB architecture,New architecture
9、for wsusscan.cab begins since November 2006 Support for existing wsusscan.cab architecture ends on March 2007 SMS ITMU customers: download and deploy updated version of the SMS ITMU http:/ MBSA 2.0 offline scan customers: Download updated version of MBSA 2.0.1 now Or download the new offline scan fi
10、le, wsusscn2.cab, by clicking http:/ Save this file to C:Documents and SettingsLocal SettingsApplication DataMicrosoftMBSA2.0Cachewsusscn2.cab. If you only run MBSA 2.0 in the online mode, do anything. See Microsoft KB Article 926464 for more information http:/ 7 over AU,Manual download (EN version)
11、 is available. Internet Explorer 7 began distribution over AU in November 2006 ZH version schedule see announcement below! Internet Explorer 7 Blocker Toolkit available for enterprise customers Blocks automatic delivery of Internet Explorer 7 For additional information see: http:/ Support Informatio
12、n,Software Update Services (SUS) 1.0 Old deadline of 6 December 2006 has CHANGED to 10 July 2007 Information on upgrading: http:/ Public security support for Windows XP SP1 and Office 2003 SP1 HAS ENDED as of 10 October 2006 No Security Updates for Windows XP SP1 or Office 2003 SP1 starting in Novem
13、ber 2006 Remaining Windows XP SP1, Office 2003 SP1 customers should upgrade to Windows XP SP2, Office 2003 SP2 right away Public security support for Windows 98, 98 SE, and Millennium Edition HAS ENDED as of 11 July 2006 See for more information Microsoft Forefront Client Security Beta open to down
14、load. http:/ Malicious Software Removal Tool KB890830,Twenty-fourth monthly incremental update. The Oct update adds the ability to remove: Win32/Beenut Available as priority update through Windows Update or Microsoft Update for Windows XP users Offered through WSUS; not offered through SUS 1.0 Also
15、as an ActiveX control or download at Deployment step-by-stsp: KB891716,Resources,Nov. Security Bulletin Webcast (US) http:/ Security Bulletins Summary http:/ Security Bulletins Search Security Advisories MSRC Blog http:/ Notifications TechNet Radio IT Pro Security Newsletter TechNet Security C
16、enter TechNet Forum ITPro http:/ Detection and deployment guidance for the December 2006 security release http:/ and Answers,Submit text questions using the “Ask a Question” button Dont forget to fill out the survey For upcoming and previously recorded webcasts: http:/ Webcast content suggestions: ,