Microsoft release (3) Security Bulletins

Bulletin Identifier
Microsoft Security Bulletin MS07-064
Bulletin Title
Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
Executive Summary
This critical security update resolves two privately reported vulnerabilities in Microsoft DirectX. These vulnerabilities could allow code execution if a user opened a specially crafted file used for streaming media in DirectX. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Maximum Severity Rating
Critical
Impact of Vulnerability
Remote Code Execution
Detection
Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update will not require a restart, except in certain situations.
Affected Software
Windows, DirectX, DirectShow. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier
Microsoft Security Bulletin MS07-068
Bulletin Title
Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 and 944275)
Executive Summary
This critical security update resolves a privately reported vulnerability in Windows Media Format. This vulnerability could allow remote code execution if a user viewed a specially crafted file in Windows Media Format Runtime. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Maximum Severity Rating
Critical
Impact of Vulnerability
Remote Code Execution
Detection
Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update will not require a restart, except in certain situations.
Affected Software
Windows, Windows Media Format Runtime. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier
Microsoft Security Bulletin MS07-069
Bulletin Title
Cumulative Security Update for Internet Explorer (942615)
Executive Summary
This critical security update resolves four privately reported vulnerabilities. The most serious security impact could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Maximum Severity Rating
Critical
Impact of Vulnerability
Remote Code Execution
Detection
Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update will require a restart.
Affected Software
Windows, Internet Explorer. For more information, see the Affected Software and Download Locations section.