Microsoft Security Bulletins for October 2007

Microsoft released the following security bulletins today:

4 Critical
MS07-055 - Vulnerability in Kodak Image Viewer Could Allow Remote Code
Execution (923810)
http://www.microsoft.com/technet/sec.../ms07-055.mspx
MS07-056 - Security Update for Outlook Express and Windows Mail (941202)
http://www.microsoft.com/technet/sec.../ms07-056.mspx
MS07-057 - Cumulative Security Update for Internet Explorer (939653)
http://www.microsoft.com/technet/sec.../ms07-057.mspx
MS07-060 - Vulnerability in Microsoft Word Could Allow Remote Code Execution
(942695)
http://www.microsoft.com/technet/sec.../ms07-060.mspx

2 Important
MS07-058 - Vulnerability in RPC Could Allow Denial of Service (933729)
http://www.microsoft.com/technet/sec.../ms07-058.mspx
MS07-059 - Vulnerability in Windows SharePoint Services 3.0 and Office
SharePoint Server 2007 Could Result in Elevation of Privilege Within the
SharePoint Site (942017)
http://www.microsoft.com/technet/sec.../ms07-059.mspx

Re-released:
Microsoft re-released the Security Bulletin MS05-004 with the following
revision (if you have already successfully installed this update, you do not
need to reinstall it) :

V4.0 (October 9, 2007): Bulletin updated as Windows Server 2003 Service Pack
2 and Windows Vista have been added to the "Affected Software" sections for
..NET Framework 1.0 Service Pack 3 KB886906 and .NET Framework 1.1 Service
Pack 1 KB886903.
http://www.microsoft.com/technet/sec.../MS05-004.mspx

Bulletin Summary at
http://www.microsoft.com/technet/sec.../ms07-oct.mspx
See also:
http://blogs.technet.com/msrc/archiv...y-release.aspx

If you have any questions regarding the patch or its implementation after
reading the above listed bulletin you should contact Product Support
Services in the United States at 1-866-PCSafety (1-866-727-2338).
International customers should contact their local subsidiary

Regards,

Donna Buenaventura
Microsoft MVP - Windows Security 2004/2007
http://cou.dozleng.com