December 2007 Monthly Security Updates and Optional Updates are Now Available on the ECE

  • Article

The December 2007 Windows XP Embedded Security Updates are now available on the Mobile & Embedded Communications Extranet (ECE) for Microsoft® Windows® XP Embedded Service Pack 2, Feature Pack 2007, and Update Rollup 1.0. The December 2007 Optional Supplement Updates are also now available.

December 2007 Windows XP Embedded Security Updates

TheDecember 2007 Windows XP Embedded Security Updatesare cumulative and include updates for both the Desktop QFE Installer (DQI) Tool and the Component Database.

The following updates are included in this release – please see the ECE for more details:

· KB 941568 Vulnerability in DirectShow Could Allow Remote Code Execution.

· KB 943460 Vulnerability in Windows URI handling could allow Remote Code Execution.

· KB 937894 Vulnerability in Message Queuing Service Could allow Denial of Service.

· KB 941569 Vulnerability in Windows Media Format Could allow Remote Code Execution.

· KB 942615 Cumulative Security Update for Internet Explorer.

· KB 942763 December 2007 cumulative time zone update.

The December 2007 Windows XP Embedded Security Updates are available at the following link on the ECE:
https://ece.partners.extranet.microsoft.com/ece/ProductSupplements/DownloadCenter/Embedded/XPE/XPEMonthlyUpdates/DistiOEM-Dec2007XPEmbeddedSecurityUpdates.htm

December 2007 Windows XP Embedded Optional Supplement Updates

TheDecember 2007 Optional Supplement Updatesare separate from the Security updates and should only be installed after the Security updates for December 2007 have been installed to realize full functionality.

The following updates are included in this release – please see the ECE for more details:

· KB 944944

o Four new time zone settings have been added to the Time Zone Setting component.

· KB 944942

o To comply with the JIS2004 standard, MS released Windows Vista with Japanese fonts based on the new JIS2004 standard. Some additional Japanese characters are included in the Version 3.0 of MSGothic (sans serif font) and MSMincho (serif font) and cannot be displayed on previous OSs. To prevent incompatibility these updated (version 3.0) fonts were made to Windows XP. These fonts are now being made available to XP Embedded systems to prevent any incompatibility when communicating with Vista systems and to comply with the new standard.

· KB 944943

o Some Japanese printer drivers require the Japanese version of ntprint.inf. This update will install Japanese printer components and files in the XP Embedded database for inclusion in runtime images.

· KB 944945

o The Windows Logon (Standard) component was missing mpnotify.exe as a file resource. This has been added in this update. The binary is one of the core OS binaries needed by Windows Logon to notify network providers of logon events.

· KB 943860

o XPe did not include a popular Chinese font that exists in XP PRO CHT (not in the CHT MUI Pack), namely "DFKai-SB (kaiu.ttf)". The existing component "Fonts: Chinese (Traditional) bitmap & TrueType fonts" was updated with kaiu.ttf as a file resource.

The December 2007 Windows XP Embedded Optional Supplement Updates are available at the following link on the ECE:
https://ece.partners.extranet.microsoft.com/ece/ProductSupplements/DownloadCenter/Embedded/XPE/XPEMonthlyUpdates/Dec07-XPEOptionalUpdates.htm

If you have questions on accessing the ECE, please email MS Mobile & Embedded Communications Feedback & Support, ECE@microsoft.com.

 

-Katy