Welcome to MSDN Blogs Sign in | Join | Help

Bulletin Number

Maximum Severity

Affected Products

Impact

MS08-068

Important

Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008.

Remote Code Execution

MS08-069

Critical

Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008. Microsoft Office 2003, Word Viewer 2003, 2007 Office System, Compatibility Pack for Office 2007 File Formats, Expression Web, Office SharePoint Server 2007, and Office Groove Server 2007.

Remote Code Execution

For more information, please visit the website: http://www.microsoft.com/technet/security/bulletin/MS08-Nov.mspx.

Hello all,

Today Microsoft has released the following Security updates:

Bulletin Number

Maximum Severity

Affected Products

Impact

MS08-056

Moderate

Microsoft Office XP

Information Disclosure

MS08-057

Critical

Microsoft Excel 2000, Excel 2002, Excel 2003 and Excel Viewer 2003, Excel 2007 and Excel Viewer, Office Compatibility Pack for 2007 File Formats, Office SharePoint Server 2007, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac

Remote Code Execution

MS08-058

Critical

Internet Explorer on Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008

Remote Code Execution

MS08-059

Critical

Microsoft Host Integration Server 2000, Host Integration Server 2004 and Host Integration Server 2006

Remote Code Execution

MS08-060

Critical

Microsoft Windows 2000 Server

Remote Code Execution

MS08-061

Important

Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008

Elevation of Privilege

MS08-062

Important

Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008

Remote Code Execution

MS08-063

Important

Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008

Remote Code Execution

MS08-064

Important

Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008

Elevation of Privilege

MS08-065

Important

Microsoft Windows 2000

Remote Code Execution

MS08-066

Important

Microsoft Windows XP, Windows Server 2003

Elevation of Privilege

For more information, please see http://www.microsoft.com/technet/security/bulletin/MS08-oct.mspx.

 

 

Hello All,

 

Today Microsoft released 4 Critical Security Updates as follows:

 

Bulletin Number

Maximum Severity

Affected Products

Impact

MS08-052

Critical

Microsoft Windows, Internet Explorer, .NET Framework, Office, SQL Server, Visual Studio (not the complete list). See the bulletin link below for a complete list.

Remote Code Execution

MS08-053

Critical

Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008. For more information.

Remote Code Execution

MS08-054

Critical

Windows XP, Windows Vista, Windows Server 2008. For more information.

Remote Code Execution

MS08-055

Critical

Office XP, Office 2003, 2007 Office System, Office OneNote 2007. For more information.

Remote Code Execution

 

For further details, please see the Microsoft TechNet site at: http://www.microsoft.com/technet/security/bulletin/MS08-sep.mspx 

 

 

 

The following eleven updates have been released by Microsoft for August 2008.  For more information please see: .

http://www.microsoft.com/technet/security/bulletin/MS08-Aug.mspx

 

 

Bulletin Number

Maximum Severity

Affected Products

Impact

MS08-041

Critical

Snapshot Viewer for Access, Office Access 2000, Office Access 2002, and Office Access 2003

Remote Code Execution

MS08-042

Important

Office Word 2002 and Office Word 2003

Remote Code Execution

MS08-043

Critical

Office Excel 2000, Office Excel 2002, Office Excel 2003, Office Excel 2007, Excel Viewer, Excel Viewer 2003, SharePoint Server 2007, Office 2004 for Mac, Office 2008 for Mac

Remote Code Execution

MS08-044

Critical

Office 2000, Office XP, Office 2003, Office Project 2002, Office Converter Pack, Works 8.0.

Remote Code Execution

MS08-045

Critical

Internet Explorer on Windows 2000, Windows XP, Windows Server 2003, Windows Vista and Windows Server 2008

Remote Code Execution

MS08-046

Critical

Windows 2000, Windows XP, Windows Server 2003

Remote Code Execution

MS08-047

Important

Windows Vista and Windows Server 2008.

Information Disclosure

MS08-048

Important

Outlook Express on Windows 2000, Windows XP, Windows Server 2003. Windows Mail on Windows Vista and Windows Server 2008

Information Disclosure

MS08-049

Important

Windows 2000, Windows XP, Windows Server 2003, Windows Vista and Windows Server 2008

Remote Code Execution

MS08-050

Important

Windows Messenger on Windows 2000, Windows XP and Windows Server 2003

Information Disclosure

MS08-051

Critical

Office PowerPoint 2000, Office PowerPoint 2002, Office PowerPoint 2003, Office PowerPoint 2007, Office PowerPoint Viewer 2003, Office Compatibility Pack for 2007 File Formats, and Office 2004 for Mac.

Remote Code Execution

 

New! Office 2007 training notebook - learn at your own pace

Are you using Microsoft Office 2007 at home or at work, or maybe Microsoft Office Enterprise 2007 at your place of employment? If so, you'll notice there are a lot of changes from previous versions of your familiar and favorite programs.

To help you navigate the new look and feel, find new and old features, and to explore new programs, we've published a "getting started" tool:

Great way to understand OneNote <my love> and Office 2007!! - S.

Cases and customers are very important for us; they make us grow in terms of individuals and from the technology perspective. In one of my recent cases I had to provide a way to switch ribbon tabs programmatically, which is, currently not possible using Office OM. I had to use Active Accessibility.

 I blogged it a few days back. I also posted in on MSDN Code gallery after its launch. Then people started liking it and asked me if it can be posted to MSDN Accessibility page... Hey! Why not, as long as it’s positioned as a sample J


Finally ... It's there on MSDN 

 

 

I spent a while doing my monthly deep dive into what's hot and what's just been released.  Here are my favorite topics, and tools.  Enjoy!   -- Susan

Hot Topics - Daylight Saving Time Changes

US and Canadian Daylight Saving Time occurs March 9: DST now begins on the second Sunday of March (in 2008, March 9), several weeks earlier than in years prior to 2007. DST will end later than usual, on the first Sunday of November (in 2008, November 2). This results in a new DST period that is approximately three to four weeks longer than in previous years. Generally, customers should have applied and updated their client and server systems previously with the 2007 DST and TZ updates, and continued to install cumulative updates as released (such as the 2008 Cumulative Time Zone Update for Windows has as noted in KB article 942763). Please review the page linked above, and the list of impacted Microsoft products at http://support.microsoft.com/gp/dst_prodlist to determine if any mitigation is needed.

 

Hot Topics - Technology Leaders Join OpenID Foundation to Promote Open Identity Management on the Web

The OpenID Foundation today announced that Google (Nasdaq:GOOG), IBM (NYSE: IBM), Microsoft Corp. (Nasdaq: MSFT), Verisign (Nasdaq:VRSN) and Yahoo! (Nasdaq: YHOO) have joined as its first corporate board members. With these companies’ deep expertise in Internet and security technology, the OpenID Foundation strengthens the industrywide effort to empower users with portable Web identities, or OpenIDs. This effort helps ensure the evolution of an open and interoperable Internet that helps people take control of how their personal information is used online and helps online businesses attract and retain more users by simplifying and securing the management of digital identities. The OpenID Foundation was formed in June 2007 to support and promote the technology developed by the OpenID community. Members include individuals, students, nonprofits, startups and industry giants that have come together to develop and promote open identity management on the Web. For more information, see http://openid.net/foundation and http://openid.net/

 

Cool Tools - I just love!

Office Add-in: Creative Commons Add-in for Microsoft Office This add-in enables you to embed Creative Commons licenses directly into Word, PowerPoint, and Excel documents

 

Communications Server 2007 Visio stencil The Office Communications Server 2007 Visio stencil contains icons for Office Communications Server 2007 server roles and components.

 

Groove 2007 Tool Template: Time Tracker Enables professional services firms, consultants, and other mobile employees to record their billable time in Microsoft Office Groove 2007.


SharePoint Templates: Preformatted document libraries for Windows SharePoint Services 3.0 and SharePoint Server 2007 Add preformatted document libraries to your Microsoft Windows SharePoint Services 3.0 or Microsoft Office SharePoint Server 2007 site. Each library is configured with a Microsoft Office Word 2007 template that generates a new document and binds data in the library with data in the body of each document.


Portfolio Server 2007 SP1 Microsoft Office Project Portfolio Server 2007 helps your organization realize its potential by identifying, selecting, managing, and delivering portfolios that align with your strategic priorities


Office SharePoint Designer 2007 Training Portal Edition and Office SharePoint Designer 2007 Training Standalone Edition The Microsoft Office SharePoint Designer 2007 Training Editions provide step-by-step through SharePoint Designer features using easy to understand videos.


Microsoft Visual Basic Power Packs 3.0

Microsoft Visual Basic Power Packs 3.0 includes a new DataRepeater control and updated versions of the three previously released Visual Basic Power Packs, Line and Shape controls, the PrintForm Component and the Printer Compatibility Library. All are now included in a single assembly.  The new DataRepeater control allows you use standard Windows Forms controls to display rows of your data in a scrollable container giving you more flexibility and customization than standard grid controls. The Line and Shape controls are a set of three graphical controls that enable you to draw lines, ovals, and rectangles on forms and containers at design time making it much easier to enhance the look of your user interface. The Printer Compatibility Library allows projects that used the Printer and Printers Collection in Visual Basic 6.0 to be upgraded without having to re-write your printing logic.  See also Microsoft Visual Basic Power Packs 3.0 Readme.htm

 

I know two blogs in two days - how ridiculous of me ;).  If you are using OneNote in a novel way please drop me a comment!

  -- Susan  

Have you ever wanted to share your OneNote Notebook in a web view? 

Here a step by step:

1. Go to your SharePoint home page - make sure you have Editor permissions

2. In the upper right hand corner, drop down Site Actions and choose "Edit Page"

The next step is to close any other open web parts on your home page to ensure your Onenote notebook can use all of the space. 

Just click the little [X] circled below to close an existing web part

clip_image003

3. Now you should see the option to "Add a web part" .  Click "Add a Web Part"

clip_image005

4. This will open a new window with a long list of webparts.  Scroll down to the "Miscellaneous" section and choose "Page Viewer Web Part" (circled in Red below) and choose Add

clip_image006

5. Now you should see the new Web Part on your SharePoint page.  It should look like the picture below.  Click the "open the tool pane" link

clip_image008

6. When the pane opens to the right, leave the setting to "Web Page" and then paste in the path to you webview.HTML file. 

7. Now click the "+" to expand the "Appearance" section

8. Set a default height that works for your page.  In my example, I've chosen 700 pixels

clip_image009

9. Click "OK" at the bottom of the right pane

10. Finally, you must "Exit Edit Mode"  Do that by clicking the button in the upper right hand corner of SharePoint circled in red below:

clip_image011

11. Now you're done!  You should see a SharePoint home page that looks something like the picture below:

clip_image012

Thought I would be a little more lighthearted and share with you my favorite videos "Office Noir" - I am that geeky - Susan

Office Noir

Office Noir Chapter I: One Version of the Truth
Office Noir Chapter I: One Version of the Truth
When Cate Spade, B-Town's ace detective, runs into an old flame, she promises to find out why his fiancé is spending so many late nights at work.

Office Noir Chapter II: The Ribbon Bar
Office Noir Chapter II: The Ribbon Bar
Join Cate as she discovers the power of results-oriented contextual extensibility.

 

Ok - now on to some more serious venues

 

Creating a Custom Page Layout with SharePoint Server 2007
Creating a Custom Page Layout with SharePoint Server 2007
Use the Web Content Management features to create a custom page layout for publishing content to the Web.

Creating Windows SharePoint Services Sites with Support for Wikis and Blogs
Creating Windows SharePoint Services Sites with Support for Wikis and Blogs
Leverage the new built-in Windows SharePoint Services 3.0 features for creating sites with blogs and wikis.

 

 

and a couple of upcoming webcasts that might interest you

MSDN Webcast: Overview of Office Business Applications and Visual Studio Tools for Office (Level 200)

Thursday, February 28, 2008

9:00 A.M.–10:00 A.M. Pacific Time

MSDN Webcast: Office Development in Visual Studio: Windows SharePoint Services Workflow (Level 200)

Thursday, March 6, 2008

12:00 P.M.–1:00 P.M. Pacific Time

For a calendar view of webcasts -

http://www.microsoft.com/events/webcasts/calendar/monthview.aspx

Office 2008 for Mac Now Available
Microsoft Corp.’s Macintosh Business Unit (Mac BU) today announced the official availability of Microsoft Office 2008 for Mac at the Macworld Conference & Expo 2008. Office 2008 for Mac is significantly enhanced to provide a simplified user experience that helps beginners and longtime experts alike deliver professional documents that are compatible for co-workers and friends on Macs and PCs. The suite provides the Office tools Mac users rely on, with a Mac-like approach and style. In addition to Office 2008, the Mac BU Web site, Mactopia (http://www.microsoft.com/mac), features a dramatic transformation to provide an even more resourceful hub for all things Mac BU.


Field Notes: How To Donate Old PCs

The U.S. EPA recently embarked on a campaign called "Do the PC Thing" that educates users on how to prepare their old hardware for reuse and offers a list of resources. This campaign is a part of the EPA's electronics recycling and reuse public awareness site, Plug-In To eCycling http://www.epa.gov/plugin/). Click on the "Reuse It!" link for articles aimed at consumers or businesses. On this site you'll learn that the most important issue with respect to donating or recycling hardware is protecting yourself. The "Do the PC Thing" literature offers basic pointers on hard-drive wiping and the legal requirements for data security and confidentiality. Whether you are disposing of your computer either for end-of-life recycling or for reuse, you must remove your sensitive data, such as passwords, documents, credit card information, e-mail messages, and Web logs.

Microsoft Office Communicator 2007 Phone Edition Microsoft Office Communicator 2007 Phone Edition is the first generation Voice over Internet Protocol (VoIP) phone which is directly compatible with Microsoft Office Communications Server 2007

How Presence Powers Office Communications Server 2007

Microsoft Office Communication Server (OCS) 2007 builds upon the strengths of the Live Communication Server (LCS) 2005 release. LCS 2005 delivered enterprise-class instant messaging (IM) and presence. It also introduced telephony integration with existing PBX installations via Remote Call Control (RCC). OCS 2007 further enhances the presence and IM capabilities in LCS 2005 and adds advanced media and phone capabilities with Office Communicator 2007, making it a full-fledged "softphone." Microsoft has also developed conferencing servers and edge servers for media that enable you to fulfill all the communication needs of your organization along with an existing PBX or independently as a complete solution in itself. This article provides an overview of the OCS 2007 solution and explains how various pieces fit together. It also covers how presence is used as an important ingredient in the unified communication recipe and how it can be utilized for routing voice calls more effectively.

 

TCP/IP Registry Values for Microsoft Windows Vista and Windows Server 2008

This white paper describes the registry values for the TCP/IP protocol stack in Microsoft Windows Vista and Windows Server 2008). The intended audience for this paper is network engineers and support professionals who are already familiar with TCP/IP (both IP version 4 [IPv4] and IP version 6 [IPv6]).

Expression Blend 2 December Preview Microsoft® Expression Blend™ 2 is the professional design tool used to create engaging Web-connected experiences for Microsoft® Windows®. The Expression Blend 2 December Preview allows you to create Microsoft® Silverlight™-based applications.

PowerPoint Viewer 2007 Microsoft Office PowerPoint Viewer 2007 lets you view full-featured presentations created in PowerPoint 97 and later versions


The 2007 Microsoft Office Servers Service Pack 1 (SP1) and The 2007 Microsoft Office Suite Service Pack 1 (SP1) Now Available for Download
The 2007 Microsoft Office Servers Service Pack 1 delivers important customer-requested stability and performance improvements, while incorporating further enhancements to user security. This service pack also includes all of the updates released for the 2007 Microsoft Office System servers prior to December of 2007. You can get a more complete description of SP1, including a list of issues that were fixed, in the Microsoft Knowledge Base articles 936984: Description of the 2007 Microsoft Office Servers Service Pack 1 and 936982: Description of the 2007 Microsoft Office suite Service Pack 1. Service Pack 1 will install even if a publicly available update has already been installed on your computer. SP1 also includes stability improvements developed as a result of user input from the Microsoft Online Crash Analysis and from Microsoft Product Support feedback. See also the following downloads and resources:

· Business Contact Manager for Outlook 2007 Service Pack 1

· Calendar Printing Assistant for Microsoft Office Outlook 2007 Service Pack 1 (SP1)

· Microsoft Expression Web Service Pack 1 (SP1)

· Microsoft Office Language Pack 2007 Service Pack 1 (SP1)

· Microsoft Office Proofing Tools 2007 Service Pack 1 (SP1)

· Microsoft Office 2003 Web Components Service Pack 1 (SP1) for the 2007 Microsoft Office System

· Microsoft Office Compatibility Pack Service Pack 1 (SP1)

· The 2007 Microsoft Office Servers Language Pack Service Pack 1 (SP1), 64-Bit Edition

· The 2007 Microsoft Office Servers Language Pack Service Pack 1 (SP1)

· Microsoft Office PowerPoint Viewer 2007 Service Pack 1 (SP1)

· Microsoft Office Project Language Pack 2007 Service Pack 1 (SP1)

· Microsoft Office Project 2007 Service Pack 1 (SP1)

· Microsoft Office SharePoint Designer Language Pack 2007 Service Pack 1 (SP1)

· Microsoft Office SharePoint Designer 2007 Service Pack 1 (SP1)

· Microsoft Office Visio Viewer 2007 Service Pack 1 (SP1)

· Microsoft Office Visio Language Pack 2007 Service Pack 1 (SP1)

· Microsoft Office Visio 2007 Service Pack 1 (SP1)

· Windows SharePoint Services 3.0 Language Pack Service Pack 1 (SP1), 64-Bit Edition

· Windows SharePoint Services 3.0 Language Pack Service Pack 1 (SP1)

· Windows SharePoint Services 3.0 Service Pack 1 (SP1)

· Windows SharePoint Services 3.0 x64 with Service Pack 1

· Windows SharePoint Services 3.0 with Service Pack 1

Microsoft Security Bulletin Summary for December 2007

 

MS07-064 - Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)

 

MS07-068 - Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 and 944275)

 

MS07-069 - Cumulative Security Update for Internet Explorer (942615)

 

MS07-063 - Vulnerability in SMBv2 Could Allow Remote Code Execution (942624)

 

MS07-065 - Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)

 

MS07-066 - Vulnerability in Windows Kernel Could Allow Elevation of Privilege (943078)

 

MS07-067 - Vulnerability in Macrovision Driver Could Allow Local Elevation of Privilege (944653)

 

 

For Office, we released the SP-1 for Office 2007.  For more details about this, please see:

 

http://www.microsoft.com/downloads/details.aspx?FamilyId=9EC51594-992C-4165-A997-25DA01F388F5&displaylang=en

 

Windows SharePoint Services 3.0 with Service Pack 1

 

 

Windows SharePoint Services 3.0 x64 with Service Pack 1

 

Windows SharePoint Services 3.0 Service Pack 1 (SP1)

 

Windows SharePoint Services 3.0 Language Pack Service Pack 1 (SP1)

 

Windows SharePoint Services 3.0 Language Pack Service Pack 1 (SP1), 64-Bit Edition

 

The 2007 Microsoft Office Servers Language Pack Service Pack 1 (SP1)

 

The 2007 Microsoft Office Servers Language Pack Service Pack 1 (SP1), 64-Bit Edition

 

The 2007 Microsoft Office Servers Service Pack 1 (SP1)

Office 2007 Professional VHD
Test Drive two new Microsoft platforms, Windows Vista Enterprise and Office 2007 Professional, and experience how they work better together.

 Now available: The 2007 Microsoft Office Security Guide

The 2007 Microsoft Office Security Guide provides IT professionals with best practices and automated tools to help strengthen the security of computers that run either Windows Vista or Windows XP SP2 and the following applications:

 

·         Microsoft Office Access 2007

·         Microsoft Office Excel 2007

·         Microsoft Office InfoPath 2007

·         Microsoft Office Outlook 2007

·         Microsoft Office PowerPoint 2007

·         Microsoft Office Word 2007


The 2007 Microsoft Office Security Guide consists of the following components:
Executive Overview, Security Guide, Threats and Countermeasures, Security Settings Spreadsheet, and GPOAccelerator

 

Office Live Add-in for Microsoft Office: Open and save documents directly from Microsoft Office Word, Office Excel, and Office PowerPoint to Microsoft Office Live Workspace The Office Live Add-in will install new menu options allowing you to open and save documents directly from Microsoft Office Word, Office Excel, and Office PowerPoint to Microsoft Office Live Workspace beta.

Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Open, edit, and save documents, workbooks, and presentations in the file formats new to Microsoft Office Word, Excel, and PowerPoint 2007.

Microsoft Application Compatibility Toolkit version 5.0 contains the necessary tools and documentation to evaluate and mitigate application compatibility issues before deploying Microsoft® Windows Vista, a Windows Update, or a new version of Windows® Internet Explorer® in your environment.

Microsoft Office Communicator 2007 Phone Edition

Microsoft Office Communicator 2007 Phone Edition enables you to make outbound audio calls and answer inbound phone calls from callers (PBX, PSTN, VoIP or soft-phone callers) and provides this functionality from inside or outside the company firewall.

With Office Communicator 2007 Phone Edition, you have new voice communication capabilities not available with your traditional desktop phone. For example you can:

·         Set call-handling options to forward calls to another number or contact, so you can get calls on your mobile phone, for example, when you’re not in the office

·         Configure your presence and view the presence for your Contacts

·         Touch-to-call a contact without needing to look up their phone number

·         Easily initiate calls to contacts, transfer calls and conference callers together

·         Play individual voicemails without needing to go through the full voicemail menu

·         Search for and call people in your company’s global address list (GAL) without needing to look up their phone number

See also: Microsoft Office Communicator 2007 Phone Edition Release Notes

 

 

New Security Bulletins

 

Microsoft is releasing the following two new security bulletins for newly discovered vulnerabilities:

 

Bulletin Number

Maximum Severity

Affected Products

Impact

MS07-061

Critical

Windows XP, Windows Server 2003

Remote Code Execution

MS07-062

Important

Windows 2000, Windows Server 2003

Spoofing

 

Summaries for these new bulletins may be found at the following pages:

 

http://www.microsoft.com/technet/security/bulletin/ms07-Nov.mspx  

 

Re-released Security Bulletins

 

In addition, Microsoft is re-releasing the following security bulletin:

 

MS07-049 - Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986) - http://www.microsoft.com/technet/security/bulletin/ms07-049.mspx 

More Posts Next page »
 
Page view tracker