(imported topic written by tim_tsai)
Microsoft released seven new Security Bulletins and re-released one old Security Bulletin (MS06-059) earlier today. Fixlet messages have been published to the “Enterprise Security” site that cover this release.
One thing of note is that two of the bulletins rated “Critical” addresses publicly disclosed vulnerabilities:
-
MS06-073 fixes the Visual Studio 2005 vulnerability discussed in Microsoft Advisory 927709: http://www.microsoft.com/technet/security/advisory/927709.mspx
-
MS06-078 addresses a vulnerability discussed by Microsoft here: http://blogs.technet.com/msrc/archive/2006/12/07/public-proof-of-concept-code-for-asx-file-format-isssue.aspx
For more information about the December release, see:
Bulletin Summary for December 2006: http://www.microsoft.com/technet/security/bulletin/ms06-dec.mspx
Microsoft Security Response Center Blog: http://blogs.technet.com/msrc/archive/2006/12/12/december-2006-monthly-security-bulletin-release.aspx