December 2012 Patch Tuesday Update 1

(imported topic written by TerryWeiChao)

Content in the Patches for Windows (English) Fixlet Site has been released.

New Fixlet Messages:

Fixlet messages for Microsoft Security Bulletins:

MS12-077

MS12-078

MS12-079

MS12-080

MS12-081

MS12-082

MS12-083

Modified Fixlet Message:

MS12-060: Vulnerability in Windows Common Controls Could Allow Remote Code Execution - Office 2003 SP3 / Office 2003 Web Components SP3 / SQL Server 2005 Express Edition with Advanced Services SP4 / SQL Server 2005 SP4 (V2.0) (ID: 1206001)

MS12-059: Vulnerability in Microsoft Visio Could Allow Remote Code Execution - Microsoft Visio 2010 SP1 (KB2687508) (x64) (V2.0) (ID: 1205906)

MS12-059: Vulnerability in Microsoft Visio Could Allow Remote Code Execution - Microsoft Visio 2010 SP1 (KB2687508) (V2.0) (ID: 1205901)

MS12-057: Vulnerability in Microsoft Office Could Allow Remote Code Execution - Microsoft Office 2010 SP1 (KB2687510) (x64) (V2.0) (ID: 1205726)

MS12-057: Vulnerability in Microsoft Office Could Allow Remote Code Execution - Microsoft Office 2010 SP1 (KB2687510) (V2.0) (ID: 1205716)

MS12-057: Vulnerability in Microsoft Office Could Allow Remote Code Execution - Microsoft Office 2010 SP1 (KB2687501) (x64) (V2.0) (ID: 1205721)

MS12-057: Vulnerability in Microsoft Office Could Allow Remote Code Execution - Microsoft Office 2010 SP1 (KB2687501) (V2.0) (ID: 1205711)

MS12-043: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution - XML Core Services 5.0 - Office SharePoint Server 2007 SP2/SP3 / Groove Server 2007 SP2/SP3 (x64) (V4.0) (ID: 1204337)

MS12-043: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution - XML Core Services 5.0 - Groove 2007 SP2/SP3 / Office SharePoint Server 2007 SP2/SP3 (V4.0) (ID: 1204335)

MS12-043: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution - XML Core Services 5.0 - Office 2003 SP3 (V4.0) (ID: 1204331)

Reason for Update:

Microsoft has released 7 Security Bulletins for December 2012.

Microsoft has re-released 5 Security Bulletins.

Actions to Take:

None

Published site version:

Patches for Windows (English), version 1691

Additional links:

Microsoft Security Bulletin Summary:

http://technet.microsoft.com/en-us/security/bulletin/ms12-dec.

Application Engineering Team

Tivoli Endpoint Manager

(imported comment written by Kenz91)

Since this update I’m noticing a problem. All of our machines have Visio viewer but only a fraction have the full Visio. Since this update all machines are showing up with the patch for MS12-059 for full Visio as relevant.

MS12-059: Vulnerability in Microsoft Visio Could Allow Remote Code Execution - Microsoft Visio 2010 SP1 (KB2687508) (V2.0) Important 995 / 1,150 Patches for Windows (English) 0 Security Hotfix 13.82 MB Microsoft KB2687508 12/11/2012

MS12-059: Vulnerability in Microsoft Visio Could Allow Remote Code Execution - Microsoft Visio Viewer 2010 SP1 (KB2598287) Important 29 / 1,150 Patches for Windows (English) 0 Security Hotfix 5.58 MB Microsoft KB2598287 8/14/2012