Microsoft released 4 security bulletins that cover 5 vulnerabilities. 3 bulletins have a critical severity rating, and the other bulletin has an important severity rating.
- MS10-042 resolves a publicly disclosed and actively exploited vulnerability discussed in Security Advisory 2219475. The update addresses an issue in the Windows Help and Support Center feature included in Windows XP and Windows Server 2003.
- MS10-043 resolves a publicly disclosed vulnerability in the Canonical Display Driver (cdd.dll).
- MS10-044 resolves two privately reported vulnerabilities in Microsoft Office Access ActiveX Controls.
- MS10-045 This security update resolves another privately reported vulnerability that could allow remote code execution if a customer opened an attachment in a specially crafted e-mail message using an affected version of Outlook -- Microsoft Outlook 2002, Microsoft Office Outlook 2003, or Microsoft Office Outlook 2007.
The security updates for the July 2010 bulletins are available for download at the Microsoft Update web site (http://www.update.microsoft.com). Please note that systems joined to the LSU Active Directory automatically receive the critical security updates when available. Other updates will have to be installed from Microsoft Update.
Remember to close all applications at the end of work day today, as security updates may require a restart of your machine.
REMINDER: It is important for LSU Users to move to supported platforms from Microsoft because after the dates below, those products/service packs will no longer receive security updates.
- Windows XP Service Pack 2 will no longer be supported after July 13, 2010. Many users are still on this version, so we encourage upgrading to Service Pack 3 or to Windows 7 as soon as possible.
- Extended support for Windows 2000 will also be retired as of July 13, 2010. After that time, Microsoft will no longer provide security or any other updates for Windows 2000.
- Windows Vista RTM (No Service Pack) will no longer be supported after the April 13, 2010 bulletin release. Service Pack 1 will still be supported until July 12, 2011 but we recommend users update to Service Pack 2 or Windows 7 at this time.
Additional Information / Tools:
- Microsoft Security Bulletin - http://www.microsoft.com/technet/security/bulletin/ms10-jul.mspx
- US-CERT Technical Alerts - http://www.us-cert.gov/cas/techalerts/
- Microsoft Baseline Security Analyzer - http://www.microsoft.com/technet/security/tools/mbsa2_1/default.mspx