Today Microsoft has released its first monthly security patch release. According to its advance notification, there are 8 planned release for today but MS changed them and updated their site to reflect that they will be releasing instead of the original 8, only 4 bulletins. No word from Microsoft as to the reason for the change, maybe its bad luck to release 8 bulletins for the first month of the year. The following are the bulletins released by MS today:
- MS07-001 Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution (921585)
- MS07-002 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (927198)
- MS07-003 Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution (925938)
- MS07-004 Vulnerability in Vector Markup Language Could Allow Remote Code Execution (929969)
Now from the release mentioned above, some of you might be wondering what ever happened to the word 0-day vulns from last December (see here and this one). Well I’m not sure if this has been secretly patched or not, but based from the monthly for December and today, I am still to see a WORD patch from them.