ITsVISTA KB-Links

KB970964

Joe — Wed, 15 Jul 2009 16:27:47 +0000

Consider the following scenario. You have a computer that is running Windows Vista or Windows Server 2008. You use the Group Policy Management snap-in of Microsoft Management Console (MMC) to browse Group Policy objects. However, when you select a Group Policy object, the Group Policy Management MMC snap-in responds slowly or even stops responding. In this scenario, you have to wait awhile before the MMC snap-in responds again.

Note: This problem usually occurs in a domain that has lots of organizational units (OUs). For example, you select a Group Policy object in a domain that has more than 100,000 OUs. In this example, it may take the Group Policy Management MMC snap-in about a half hour to resume responsiveness.

ITsVISTA

KB970964

KB972495

Joe — Wed, 15 Jul 2009 16:26:39 +0000

Network bindings are incorrect after you change a network adapter’s configuration. For example, this can occur after you enable or disable a network adapter, or after you install or remove the driver for a network adapter. In some cases, all transports and filters are bound to each available miniport at the same time.

ITsVISTA

KB972495

KB971311

Joe — Wed, 15 Jul 2009 16:25:41 +0000

You develop an application by using the WTSWaitSystemEvent function in Windows Vista or Windows Server 2008. You set the value of the EventMask parameter to WTS_EVENT_FLUSH in the WTSWaitSystemEvent function. The WTS_Event_Flush value enables you to receive all pending WTSWaitSystemEvent function calls on the specified terminal server handle. However, when the application runs in Windows Vista or Windows Server 2008 and the target server runs Windows XP, pending calls to the WTSWaitSystemEvent function do not return as expected.

When this problem occurs, the application that uses the WTSWaitSystemEvent function will crash. Therefore, you must end the corresponding process in Task Manager. This recovers the application.

Notes

In Windows Vista RTM, a function fails when the target server is a local computer, or when it is a remote computer that is running Windows XP. However, hotfix 941561 resolves this problem. After you apply hotfix 941561, the function works both locally and remotely.
In Windows Vista Service Pack 1 (SP1) or in Windows Server 2008, the function works locally. However, it fails if the target server is running Windows XP.

ITsVISTA

KB971311

KB967167

Joe — Wed, 15 Jul 2009 16:24:07 +0000

An update is available that enables Routing and Remote Access service (RRAS) servers that are running Windows Server 2008 to negotiate Internet Key Exchange (IKE) differently. This update allows these RRAS servers to use the Diffie-Hellman 2048 (DH-2048) algorithm together with the AES-256 algorithm to negotiate IKE in the Layer 2 Tunneling Protocol (L2TP).

ITsVISTA

KB967167

KB971330

Joe — Wed, 15 Jul 2009 16:22:10 +0000

In a network environment, you run an application to monitor a computer that runs Windows Vista or Windows Server 2008. The application, such as Microsoft Operations Manager (MOM) 2005, SQL Server Management Studio, or .NET, uses an event log API in legacy Windows. However, the application does not receive event information in a readable format.

The affected event logs include the following:

Descriptions of Application log events from the Microsoft-Windows-RestartManager source.
Descriptions of Application log events from the Microsoft-Windows-ApplicationExperienceInfrastructure source.
Descriptions of System log events from the Service Control Manager source.
Descriptions of System log events from the Microsoft-Windows-TBS source.

Note: The hotfix that is mentioned in Knowledge Base article 961099 addresses the event sources that are related to Security event log. These event sources include the following:

Microsoft-Windows-Security-Auditing
Microsoft-Windows-Eventlog

ITsVISTA

KB971330

KB973346

Joe — Tue, 14 Jul 2009 20:09:37 +0000

Description: This security update resolves a privately reported vulnerability that is currently being exploited. The vulnerability in Microsoft Video ActiveX Control could allow remote code execution if a user views a specially crafted Web page with Internet Explorer, instantiating the ActiveX control. This ActiveX control was never intended to be instantiated in Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. The security update addresses the vulnerability by setting a kill bit so that the vulnerable control does not run in Internet Explorer.

Update type: None

Release date: July 14, 2009

Applies to: All versions

Knowledge base: support.microsoft.com/kb/973346

Download link: 32-bit | 64-bit

Comments:Here are the specifics on the vulnerabilities covered by this update:

Microsoft Video ActiveX Control Vulnerability – CVE-2008-0015

ITsVISTA

KB973346

KB961371

Joe — Tue, 14 Jul 2009 20:04:57 +0000

Description: This security update resolves two privately reported vulnerabilities in a Microsoft Windows component, the Embedded OpenType (EOT) Font Engine. The vulnerabilities could allow remote code execution. An attacker who successfully exploited either of these vulnerabilities could take complete control of an affected system remotely. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. The update addresses the vulnerability by correcting the way that the Microsoft Windows EOT component parses files and content containing embedded fonts.

Update type: Critical

Release date: July 14, 2009

Applies to: All versions

Knowledge base: support.microsoft.com/kb/961371

Download link: 32-bit | 64-bit

Comments:Here are the specifics on the vulnerabilities covered by this update:

Embedded OpenType Font Integer Overflow Vulnerability – CVE-2009-0232

ITsVISTA

KB961371

KB972144

Joe — Mon, 13 Jul 2009 18:30:28 +0000

You remove access to Windows Media Player by clicking Set program access and computer defaults. In this case, the Windows Media Player icon is removed from the All Programs list. However, when you manually start and configure Windows Media Player, the Windows Media Player icon is added to the “All Programs” list by itself.

Note You can manually start Windows Media Player by double-clicking the Wmplayer.exe application, or by clicking on a file for which Windows Media Player is the only registered application, such as a .wma file.

ITsVISTA

KB972144

KB969512

Joe — Mon, 13 Jul 2009 18:28:49 +0000

The MIDI application that uses the inbox universal serial bus (USB) audio driver crashes after a high rate of MIDI events occur on a computer that is running Windows Vista or Windows Server 2008.

ITsVISTA

KB969512

KB971138

Joe — Mon, 13 Jul 2009 15:16:32 +0000

You have an application that uses the per-user class registration feature. However, the application does not run on a computer that is running Windows Vista or Windows Server 2008. Additionally, you may receive the following error message:

Interface not found

ITsVISTA

KB971138

ITsVISTA KB-Links

KB970964

Related posts

KB972495

Related posts

KB971311

Related posts

KB967167

Related posts

KB971330

Related posts

KB973346

Related posts

KB961371

Related posts

KB972144

Related posts

KB969512

Related posts

KB971138

Related posts