Microsoft will issue 12 Security Bulletins on August 12, 2008, and it will host a webcast to address customer questions on these bulletins on August 13 at 11:00am PDT. Seven of the vulnerabilities are marked as "Critical" and five of them are rated "Important." Nine of these has a remote code execution impact, meaning a hacker could potentially gain remote control of an infected machine. At least five of the 12 updates will require a restart.
The affected operating system list consists of Windows 2000, Windows XP (x86 and x64), and Windows Server 2003 (x86 and x64), Windows Vista (x86 and x64), and Windows Server 2008 (x86 and x64). The vulnerabilities all focus around Internet Explorer (5.01, 6, and 7), Windows Media Player 11, and Outlook Express (5.5 and 6), and Windows Mail. The exact breakdown of the 12 bulletins is as follows:
- Bulletin 1: Critical (Remote Code Execution), Windows
- Bulletin 2: Critical (Remote Code Execution), Windows, Internet Explorer
- Bulletin 3: Critical (Remote Code Execution), Windows
- Bulletin 4: Critical (Remote Code Execution), Microsoft Office
- Bulletin 5: Critical (Remote Code Execution), Microsoft Office
- Bulletin 6: Critical (Remote Code Execution), Microsoft Office
- Bulletin 7: Critical (Remote Code Execution), Microsoft Office
- Bulletin 8: Important (Information Disclosure), Windows
- Bulletin 8: Important (Remote Code Execution), Windows
- Bulletin 8: Important (Information Disclosure), Windows, Outlook Express, Windows Mail
- Bulletin 8: Important (Information Disclosure), Windows, Windows Messenger
- Bulletin 8: Important (Remote Code Execution), Microsoft Office
Along with these patches, Microsoft is also planning to release the following on Patch Tuesday:
- One or more non-security, high-priority updates on Windows Update (WU) and Windows Server Update Services (WSUS)
- One or more non-security, high-priority updates on Microsoft Update (MU) and WSUS
- An updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Microsoft Download Center
Source : here