From Microsoft

Jul 11, 2007 09:55 GMT  ·  By

The July 2007 Security Releases ISO Image is a download made available by Microsoft concomitantly with this month's collection of updates. The Redmond company released a total of six security bulletins on July 10, but only three of them made it into the DVD5 ISO image, namely just the security updates for Windows. The download is designed to enable corporate users to access multiple security patches in different languages simultaneously. The July 2007 Security Releases ISO Image is an indispensable resource for the deployment of security updates across multinational organizations and in various individual language versions outside of the company's Windows Server Update Services automated solution.

The ISO image contains just the following security bulletins: MS06-078, MS07-038, MS07-039, and MS07-041. In this context, users will notice that Microsoft's ISO Image includes one additional bulletin on top of the three from the MS07-036 to MS07-041 releases. The Microsoft Security Bulletin MS06-078 is designed to address a critical security flaw in Windows Media Format that could potentially allow for remote code execution. The July 2007 Security Releases ISO Image weighs in at 235.3 MB and delivers updates for Windows XP, Windows Server 2003 and Windows Vista.

Additionally, Microsoft has also made available a couple of downloads to help corporate customers manage the deployment of the July 2007 security updates. The EST 2007 07 July 10 Enterprise Scan Tool (standalone) is just such an example.

"Microsoft has released a new tool designed to help enterprises detect updates provided with the Microsoft Security Bulletins released July 10 2007. This tool is a command line scanning tool built for the sole purpose of helping customers determine systems that may need security updates provided with the released bulletins. As part of an ongoing commitment to provide detection tools for bulletin-class issues, a stand-alone tool has been provided. When a detection tool is created for a specific bulletin, customers will be able to script running the tool from a command line interface, and process the results using an XML output file," Microsoft informed.

And on 10 July 2007, the Redmond company also released the Extended Security Update Inventory Tool. "The SMS Extended Security Update Inventory tool is a scan tool built for the sole purpose of helping customers determine SMS client computers that may need security updates that are not detectable using the existing SMS Security Update Inventory Tool built on MBSA. Like the SMS Software Update Inventory tool, this tool also has the instructions for locating each applicable update, downloading it from Microsoft, and deploying it using SMS . The SMS Extended Security Update Inventory Tool is built on Enterprise Scan Tool (EST) detection technology," reads a fragment of Microsoft's description of the tool.