Captain's Blog

New IE7 security info

From Microsoft

This is Christopher Budd.  I wanted to take a moment and let people know some information about a new public report about a possible vulnerability in Internet Explorer we’ve received today. As soon as we learned of the report we started an investigation into the issue and we have some information we can share on this.

Install IE7 corporate-wide in 30 minutes or less

(From the Shavlik data team)

Shavlik Technologies has released updated patch and spyware XML files for Shavlik HFNetChkPro and Shavlik NetChk Protect.

[Patch]

XML data version = 1.1.3.3025 Last modified on 10/19/2006

Added MSIE-007

This is a software distribution patch that will install Internet Explorer 7 on XP SP2 and WS03 SP1 systems. You may also uninstall

IE7 via this patch. To scan for and deploy IE7, create a new scan template and select 'software distribution' as the patch type. Shavlik recommends rebooting the system after installing IE7.

Added MSWU-085 (KB919166) for WS03 SP1

The address book function on Exchange 12 is broken when the Exchange OWA client and the Windows Server 2003-based domain controller do not have the same locale setting

Added MSWU-086 (KB917805) for WS03 SP1

The Wmiprvse.exe process consumes an ever-increasing amount of memory when you enumerate the MSCluster_ResourceToPossibleOwner class on a Windows Server 2003-based server cluster

Added MSWU-087 (KB917021) for XP SP2

Wireless Client Update for Windows XP with Service Pack 2

Added MSWU-088 (924867) for Win2K SP4, XP SP1 and SP2, and WS03 SP1 Programs unexpectedly stop during initialization after you install security update 917422 (MS06-051)

Added re-released MS06-061 for Windows 2000 SP4 Microsoft re-released the MS06-061 patch for Windows 2000 SP4 systems running msxml3. The new patch properly writes registry kill bits for msxml2. If you installed the original patch, you will see a new missing patch for MS06-061 that will install the re-released patch that will write the registry kill bit.

[Spyware]

Version 5.6

XML Date: 10/19/2006

XML Version: 1.0.2.1418

XML Object Count: 99,343

Version 5.5

XML Date: 10/19/2006

XML Version: 1.0.2.1417

XML Object Count: 98,986

Added Party Casino

Added Pest Capture

Added Spy Deface

Added 1st AntiVirus

Added MessengerPlus!

Added new version of MessengerPlus!

Updated RazeSpyware

Updated BonziBuddy

HF easily installs IE7

From the data team (you will be able to push IE 7 onto our networks w/o any software delivery agent to setup - I am pretty sure we are the only product on the market to do this, and with the push of a button at that!)

Microsoft has just released Internet Explorer 7. http://www.microsoft.com/windows/ie/default.mspx?mg_ID=10010

Shavlik is currently testing this software to ensure that we can provide a
smooth experience for this installation.  Shavlik aims to release XML files
within the next 24 to 48 hours that will support installing this application.

Please Note: Internet Explorer 7 can be installed on Windows XP SP2 and Windows Server 2003 SP1 systems.  This browser cannot be installed on Windows XP SP1 or Windows 2000 systems.

When XML files are released, deployment of IE7 will be available as a 'software distribution' patch.  To deploy IE7, create a custom scan template and select patch type 'software distribution' and then deploy to selected systems. 
(To prevent unplanned installations where customers have selected to
'auto-deploy all missing patches' and have paired this with the WUScan
template, Shavlik will NOT be offering this installation as a MSWU patch via
the WUScan template.)