Windows 7 - Security Bulletins for July 2008

Asked By Donna Buenaventura

08-Jul-08 12:05 PM

As part of Microsoft's routine, monthly security update cycle, they released
4 new security bulletins:

MS08-037 - Vulnerabilities in DNS Could Allow Spoofing (953230)
http://www.microsoft.com/technet/security/Bulletin/MS08-037.mspx
MS08-038 - Vulnerability in Windows Explorer Could Allow Remote Code
Execution (950582)
http://www.microsoft.com/technet/security/Bulletin/MS08-038.mspx
MS08-039 - Vulnerabilities in Outlook Web Access for Exchange Server Could
Allow Elevation of Privilege (953747)
http://www.microsoft.com/technet/security/Bulletin/MS08-039.mspx
MS08-040 - Vulnerabilities in Microsoft SQL Server Could Allow Elevation of
Privilege (941203)
http://www.microsoft.com/technet/security/Bulletin/MS08-040.mspx

You can view this month's Security Bulletins Summary at their website:
http://www.microsoft.com/technet/security/bulletin/ms08-jul.mspx
Visit also the MSCRC blog for further notes or details on the said security
bulletins:
http://blogs.technet.com/msrc/

For information about non-security releases on Windows Update and Microsoft
update, please see http://support.microsoft.com/kb/894199/en-us

Don't forget to scan the system using Microsoft Baseline Security Analyzer
(MBSA) to check for missing and mis-configured patches.
http://www.microsoft.com/technet/security/tools/mbsahome.mspx

Security Updates support is free of charge.  Contact MS at 1-866-CSAFETY if
you are in the US or Canada.  International users, please go to
http://go.microsoft.com/fwlink/?LinkId=21155

Regards,

Donna
http://cou.dozleng.com

08-Jul-08 06:32 PM

This update causes ZoneAlarm to block all outgoing traffic went the security
setting for the Internet Zone is set to "High." Only by changing the setting
to "Medium" or turning ZoneAlarm off entirely can you access the internet.

I hope this can be figured out by either Microsoft or CheckPoint or both...
--
Robert

08-Jul-08 10:38 PM

Hi,
There is a work-around at their forum on this issue (resetting the ZA
database) :
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727

Hopefully ZA will see the changes the next time MS releases an update.

Regards,
Donna