Jan 2k8 MS Updates

[nffc]

Microsoft Security Bulletin Advance Notification for January 2008
Issued: January 3, 2008
************************************************** ******************

This is an advance notification of two security bulletins that Microsoft is intending to release on January 8, 2008.

The full version of the Microsoft Security Bulletin Advance Notification for January 2008 can be found at http://www.microsoft.com/technet/sec.../ms08-jan.mspx.

This bulletin advance notification will be replaced with the January bulletin summary on January 8, 2008. For more information about the bulletin advance notification service, see http://www.microsoft.com/technet/sec...n/advance.mspx.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications on http://www.microsoft.com/technet/sec...in/notify.mspx.

Microsoft will host a webcast to address customer questions on these bulletins on Wednesday, January 9, 2008, at 11:00 AM Pacific Time (US & Canada). Register for the January Security Bulletin Webcast at http://www.microsoft.com/technet/sec...n/summary.mspx.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.


Critical Security Bulletins
===========================

Microsoft Security Bulletin 1

- Affected Software:
- Microsoft Windows 2000 Service Pack 4
- Windows XP Service Pack 2
- Windows XP Professional x64 Edition
- Windows XP Professional x64 Edition Service Pack 2
- Windows Server 2003 Service Pack 1
- Windows Server 2003 Service Pack 2
- Windows Server 2003 x64 Edition
- Windows Server 2003 x64 Edition Service Pack 2
- Windows Server 2003 with SP1 for Itanium-based Systems
- Windows Server 2003 with SP2 for Itanium-based Systems
- Windows Vista
- Windows Vista x64 Edition

- Impact: Remote Code Execution
- Version Number: 1.0

Important Security Bulletins
============================

Microsoft Security Bulletin 2

- Affected Software:
- Microsoft Windows 2000 Service Pack 4
- Windows XP Service Pack 2
- Windows XP Professional x64 Edition
- Windows XP Professional x64 Edition Service Pack 2
- Windows Server 2003 Service Pack 1
- Windows Server 2003 Service Pack 2
- Windows Server 2003 x64 Edition
- Windows Server 2003 x64 Edition Service Pack 2
- Windows Server 2003 with SP1 for Itanium-based Systems
- Windows Server 2003 with SP2 for Itanium-based Systems

- Impact: Local Elevation of Privilege
- Version Number: 1.0

Other Information
=================

Microsoft Windows Malicious Software Removal Tool:
==================================================
Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

Note that this tool will not be distributed using Software Update Services (SUS).

Non-Security, High-Priority Updates on MU, WU, and WSUS:
================================================== ======
For this month:

* Microsoft is planning to release five non-security, high-priority updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

* Microsoft is planning to release two non-security, high-priority update for Windows on Windows Update (WU) and WSUS.

Note that this information pertains only to non-security, high-priority updates on Microsoft Update, Windows Update, Windows Server Update Services, and Software Update Services released on the same day as the Security Bulletin Summary. Information will not be provided about non-security updates released on other days.