The monthly Microsoft
security updates for February were released on 2/13/2007.
There are12 updates addressing 20
separate issues in
supported Windows operating systems and related components.
The February bulletin includes MS07-005 through MS07-007
which Microsoft rates at an “important” level, and MS07-008
through MS07-010, and MS07-014 through MS07-016 which
Microsoft rates at a “critical” level.
MAS has tested the MS Critical patches listed below and
found no adverse affects on the RALS System. These patches
may be applied by IT/IRM in consultation with POC users at
the customer’s discretion.
-
MS07-005 – Important
Vulnerability in Step-by-Step Interactive Training Could
Allow Remote Code Execution (923723)
-
MS07-006 – Important
Vulnerability in Windows Shell Could Allow Elevation of
Privilege (928255)
-
MS07-007 – Important
Vulnerability in Windows Image Acquisition Service Could
Allow Elevation of Privilege (927802)
-
MS07-008 – Critical
Vulnerability in HTML Help ActiveX Control Could Allow
Remote Code Execution (928843)
-
MS07-009 – Critical
Vulnerability in Microsoft Data Access Components Could
Allow Remote Code Execution (927779)
-
MS07-010 – Critical
Vulnerability in Microsoft Malware Protection Engine
Could Allow Remote Code Execution (932135)
-
MS07-011 – Important
Vulnerability in Microsoft OLE Dialog Could Allow Remote
Code Execution (926436)
-
MS07-012 – Important
Vulnerability in Microsoft MFC Could Allow Remote Code
Execution (924667)
-
MS07-013 – Important
Vulnerability in Microsoft RichEdit Could Allow Remote
Code Execution (918118)
-
MS07-014 – Critical
Vulnerabilities in Microsoft Word Could Allow Remote
Code Execution (929434)
-
MS07-015 – Critical
Vulnerabilities in Microsoft Office Could Allow Remote
Code Execution (932554)
-
MS07-016 – Critical
Cumulative Security Update for Internet Explorer
(928090)
*** NOTE: Microsoft has discontinued support for the Windows
NT operating system. Potential vulnerabilities to Windows
NT-based systems were not addressed or reviewed, nor were
any patch provided by Microsoft for NT systems. ***