Download Windows 7 SP1 Security Release ISO Image for November 2011

The November 2011 Security Release ISO Image is now available on the Microsoft Download Center, packing all the patches released by the software giant this month. 

Security Release ISO images are a tradition at Microsoft, with the releases designed to cater to IT professionals that don’t use Windows Server Update Services (WSUS), or another solution to automate the downloading and deployment of Windows patches.

Although the Redmond company offered only four Windows security bulletins this month, the download still weighs in at 370. MB. This is because the security updates packed inside come in all the languages supported by Windows.

MS11-083 – Critical, MS11-084 – Moderate, MS11-085 – Important and MS11-086 – Important, are the four security bulletins released for Windows in November 2011, all of which can be found in the DVD5 ISO image file.

In addition, the download also offers MS11-037 – Important released initially in June and MS11-071 – Important, provided to customers in September.

MS11-083 is designed to patch a Critical vulnerability in the TCP/IP stack, which affects all versions of Windows, including Windows 7 SP1, but not Windows XP or Windows Server 2008 R2.

Microsoft also provides information on the additional security bulletins included into the November 2011 Security Release ISO Image:

“MS11-084 – [patches a security hole which] could allow denial of service if a user opens a specially crafted TrueType font file as an e-mail attachment or navigates to a network share or WebDAV location containing a specially crafted TrueType font file.

MS11-085 – [resolves an issue which] could allow remote code execution if a user opens a legitimate file (such as an .eml or .wcinv file) that is located in the same network directory as a specially crafted dynamic link library (DLL) file.

MS11-086 – [fixes a vulnerability that] could allow elevation of privilege if Active Directory is configured to use LDAP over SSL (LDAPS) and an attacker acquires a revoked certificate that is associated with a valid domain account and then uses that revoked certificate to authenticate to the Active Directory domain.”

The November 2011 Security Release ISO Image is available for download here.

Posted in: News, Review, Software