Re: [Full-disclosure] Out-of-band Microsoft Security Bulletin to be issued: October 23, 2008

[n3td3v <xploitable@xxxxxxxxx>]

Usually when they do this it means there is already "attacks/exploit
code in the wild"? Or have Microsoft changed strategy? As long as ZERT
don't get a chance to manifest anymore then im happy. By the way,
Sachs was part of ZERT... Obama 08.

On Thu, Oct 23, 2008 at 10:25 AM, n3td3v <xploitable@xxxxxxxxx> wrote:
> ---------- Forwarded message ----------
> From: n3td3v <xploitable@xxxxxxxxx>
> Date: Thu, Oct 23, 2008 at 10:24 AM
> Subject: Out-of-band Microsoft Security Bulletin to be issued: October 23, 
> 2008
> To: n3td3v <n3td3v@xxxxxxxxxxxxxxxx>
>
>
> Microsoft Security Bulletin Advance Notification issued: October 22, 2008
>
> Microsoft Security Bulletin to be issued: October 23, 2008
>
> This is an advance notification of an out-of-band security bulletin
> that Microsoft is intending to release on October 23, 2008.
>
> This bulletin advance notification will be replaced with the revised
> October bulletin summary on October 23, 2008. The revised bulletin
> summary will include the out-of-band security bulletin as well as the
> security bulletins already released on October 14, 2008.
>
> For more information about the bulletin advance notification service,
> see Microsoft Security Bulletin Advance Notification.
>
> To receive automatic notifications whenever Microsoft Security
> Bulletins are issued, subscribe to Microsoft Technical Security
> Notifications.
>
> Microsoft is hosting a webcast to address customer questions on this
> out-of-band security bulletin on October 23, 2008, at 1:00 PM Pacific
> Time (US & Canada). Register now for the Out-of-Band Security Bulletin
> Webcast. After this date, this webcast is available on-demand. For
> more information, see Microsoft Security Bulletin Summaries and
> Webcasts.
>
> Microsoft also provides information to help customers prioritize
> monthly security updates with any non-security, high-priority updates
> that are being released on the same day as the monthly security
> updates. Please see the section, Other Information.
>
> Critical (1)
>
> Maximum Severity Rating
> Critical
>
> Impact of Vulnerability
> Remote Code Execution
>
> Detection
> Microsoft Baseline Security Analyzer can detect whether your computer
> system requires this update. The update requires a restart.
>
> Affected Software
> Microsoft Windows. For more information, see the Affected Software section.
>
> http://www.microsoft.com/technet/security/bulletin/ms08-oct.mspx
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/