Systems Affected

Microsoft Windows
Microsoft Windows Server
Microsoft Internet Explorer
Microsoft Office for Windows and Mac OS X
Microsoft Exchange
Microsoft CAPICOM
Microsoft BizTalk

Download capicom 2.1.0.2 for free. Development Tools downloads - Microsoft Capicom by Microsoft and many more programs are available for instant and free download. CAPICOM is a 32-bit only component that is available for use in the following operating systems: Windows Server 2008, Windows Vista, Windows XP. Instead, use the.NET Framework to implement security features. For more information, see the alternatives listed below.

Overview

Microsoft has released updates that address critical vulnerabilities in Microsoft Windows, Internet Explorer, Office, Exchange, Cryptographic API Component Object Model (CAPICOM), and BizTalk. Exploitation of these vulnerabilities could allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service on a vulnerable system.

Description

Microsoft has released updates to address vulnerabilities that affect Microsoft Windows, Internet Explorer, Office, Exchange, CAPICOM, and BizTalk as part of the Microsoft Security Bulletin Summary for May 2007. The most severe vulnerabilities could allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service on a vulnerable system.

In addition a previously disclosed vulnerability in Microsoft DNS RPC is addressed in this update.

Further information about the vulnerabilities addressed by these updates is available in the Vulnerability Notes Database.

Impact

A remote, unauthenticated attacker could execute arbitrary code on a vulnerable system. An attacker may also be able to cause a denial ofservice.

Solution

Apply updates from Microsoft

Microsoft has provided updates for these vulnerabilities in the May 2007 Security Bulletins. The Security Bulletins describe any known issues related to the updates. Note any known issues described in the Bulletins and test for any potentially adverse effects in your environment.

System administrators may wish to consider using an automated patchdistribution system such as Windows Server Update Services(WSUS).

Mac Os Download

References

US-CERT Vulnerability Notes for Microsoft May 2007 updates - http://www.kb.cert.org/vuls/byid?searchview&query=ms07-may
Technical Cyber Security Alert TA07-103A: Microsoft Windows DNS RPC Buffer Overflow - http://www.us-cert.gov/cas/techalerts/TA07-103A.html
Securing Your Web Browser - http://www.us-cert.gov/reading_room/securing_browser/
Microsoft Security Bulletin Summary for May 2007 - http://www.microsoft.com/technet/security/bulletin/ms07-may.mspx
Microsoft Update - https://update.microsoft.com/microsoftupdate/
Microsoft Office Update - http://officeupdate.microsoft.com/
Microsoft Office for Mac Update - http://www.microsoft.com/mac/
Windows Server Update Services - http://www.microsoft.com/windowsserversystem/updateservices/default.mspx

Revision History

Mac Os Versions

May 8, 2007: Initial release

This product is provided subject to this Notification and this Privacy & Use policy.

Please share your thoughts.

We recently updated our anonymous product survey; we'd welcome your feedback.

-->

[CAPICOM is a 32-bit only component that is available for use in the following operating systems: Windows Server 2008, Windows Vista and Windows XP. Instead, use the .NET Framework to implement security features. For more information, see Alternatives to Using CAPICOM.]

The CAPICOM COM client provides services that enable application developers to add security based on cryptography to applications. CryptoAPI includes functionality for authentication using digital signatures, for enveloping messages, and for encrypting and decrypting data.

Category	Description
Certificate Store Objects	Objects available for using certificate stores and the certificates in those stores.
Digital Signature Objects	Objects used to digitally sign data and to verify digital signatures.
Enveloped Data Objects	Objects used to create enveloped data messages for privacy and to decrypt data in enveloped messages.
Data Encryption Objects	Objects used to encrypt data and to decrypt encrypted data.
Auxiliary Objects	Objects used to change default behaviors and to manage certificates, certificate stores, and user interface (UI) messages.
Interoperability Interfaces	Interfaces that allow derivations of CryptoAPI to work together with CAPICOM 2.0.
Enumeration Types	Enumeration types used with CAPICOM.

Certificate Store Objects

The following objects work with certificate stores and the certificates in those stores. CAPICOM supports the use of Current User, Local Machine, Memory, and Active Directory certificate stores.

Object	Description
Certificate	A single digital certificate.
CertificatePolicies	A collection of PolicyInformation objects.
Certificates	Collection of Certificate objects.
CertificateStatus	Provides status information on a certificate.
Chain	Creates and checks a certificate validation chain based on a digital certificate.
ExtendedProperties	Represents a collection of ExtendedProperty objects.
ExtendedProperty	Represents a Microsoft-extended property.
Extension	Represents a single certificate extension.
Extensions	Represents a collection of Extension objects.
PrivateKey	Represents a private key.
PublicKey	Represents a public key in a Certificate object.
Store	Provides the properties and methods to choose, manage, and use certificate stores and the certificates in those stores.
Template	Represents the certificate extension template of the certificate.

Digital Signature Objects

The following objects are exported to digitally sign data and to verify digital signatures.

Object	Description
SignedCode	Provides functionality for signing content with an Authenticode digital signature.
SignedData	Object used to sign data and to verify the signature on signed data.
Signer	Information on a single data signer, including the signer's certificate.
Signers	Collection of Signer objects.

Enveloped Data Objects

The following objects are exported to create enveloped data messages for privacy and to decrypt data in enveloped messages.

Object	Description
EnvelopedData	Objects used to create, send, and receive enveloped data. Enveloped data is encrypted so that only the intended recipients can decrypt it.
Recipients	Collection of the Certificate objects of the intended recipients of an enveloped message.

Data Encryption Objects

The following object is exported to encrypt arbitrary data for privacy and to decrypt encrypted data.

Object	Description
EncryptedData	Objects used to encrypt data. Encrypted data in an EncryptedData ob

Capicom Mac Os