미우나 고우나

 - wong chee tat :)

A Lover's Concerto - Kelly Chen

 - wong chee tat :)

Bedok Point officially launched

Bedok Point officially launched
By Millet Enriquez | Posted: 26 April 2011 1937 hrs
 
SINGAPORE : Frasers Centrepoint Malls has officially opened its latest neighbourhood mall at Bedok Town Centre on Tuesday.

Bedok Point features over 70 shops, with many F&B tenants located on the first level.

Fraser & Neave Chairman Lee Hsien Yang graced the opening of the four-storey Bedok Point - which is the 9th in the companies' mall portfolio.

The mall has a total net lettable area of 81,000 square feet, with an occupancy rate of 98 per cent.

Since its soft opening in December, the mall is said to have attracted over 900,000 shoppers every month. Bedok Point enjoys a captive shopper catchment of more than 295,000 residents.

A big crowd puller is the mall's long operating hours where F&B tenants will remain open until 1am on weekdays and 3am on weekends.

Christopher Tang, CEO of Frasers Centrepoint Commercial said: "It represents the kind of momentum that we are trying to develop as a retail mall in this space. So far, we are taking traction. We have two classes of mall; Bedok Point is the third within the class that we call the neighbourhood malls - the smaller, more intimately-sized and integrated to the heartbeat of the immediate surrounding, the community that surround us.

"The next exciting concept that you can expect to hear from us will be the one which we are going to call Changi Citypoint. That is going to be next to the MRT station. We expect to open that for trading by the second half of this year. That mall will be 205,000 square feet, with close to 150 tenants."

Further in the pipeline is another mall at Punggol which will be the 11th in the firm's portfolio. The mall will have 350,000 to 400,000 square feet and will be built next to a riverfront.

- CNA /ls

- wong chee tat :)

Resale flat prices increase, but COV premiums drop 9% in Q1

Resale flat prices increase, but COV premiums drop 9% in Q1
By Linette Lim | Posted: 25 April 2011 2138 hrs

SINGAPORE: The price of resale flats went up in the first quarter of 2011, but Cash-Over-Valuation premiums fell to S$21,000 - a 9 per cent drop from the previous quarter, according to data from the HDB.

Observers attribute the lower COV premiums to the government's cooling measures which took effect in the first quarter of this year.

Going forward, analysts have mixed views on the outlook for COV premiums.

"Currently the COVs have come to a point where it is not going any much lower. Based on our PropNex data, the COV for the month of April has already gone up to a median at S$23,000, which is where we were starting prior to the first quarter," said PropNex CEO Mohamed Ismail.

For the first quarter of 2011, the price of resale flats rose 1.6 per cent.

The increase is at a slower pace than the 2.5 per cent rise in the previous quarter.

Meanwhile, median sublet rents in Q1 remained relatively stable with increases from 1-room and 5-room flats and decreases from 2-room flats.

Subletting transactions rose by 8 per cent to 6,365 cases.

The total number of HDB flats approved for subletting rose to about 36,400 units in Q1, compared to about 35,000 units in the previous quarter.

Some analysts believe COV premiums will likely continue to fall as a result of new supply coming on stream.

Separately, HDB said it will launch another 3,185 flats in Hougang, Sembawang, Sengkang and Punggol for sale under the April 2011 Build-to-Order BTO exercise.

This will bring the total supply of new BTO flats this year to 22,000, compared to the 16,000 BTO flats that were offered last year.

"I think the fact that there's going to be 22,000 new HDB dwellings up in the marketplace, and the government's ramping up in terms of its development machinery to develop more HDB properties...will mean vendors cannot hold on to their COV asking prices," said Mr Donald Han, vice chairman of Cushman and Wakefield.

In addition to the BTO flats, units under the Design, Build & Sell Scheme (DBSS) and the Executive Condominium (EC) Housing Scheme will be offered as well.

An EC site at Punggol with an estimated yield of 700 units, and two DBSS sites at Sengkang and Bendemeer Road with a potential yield of about 1,500 units, will be released for tender in May and June 2011 respectively.

Despite the supply of new flats, Mr Han believes there could be a one to two per cent uptake in HDB resale prices in the next one or two quarters.

Mr Ismail also thinks the resale prices will trend up, as new supply of BTO flats are not a perfect substitute for the resale units.

- CNA/cc

- wong chee tat :)

DBS unveils new platform for wealth clients

DBS unveils new platform for wealth clients
Posted: 26 April 2011 1955 hrs
 
SINGAPORE: As part of its strategy to grow wealth management assets from US$35 billion to US$50 billion in the next three years, DBS is ramping up its offerings to the high net-worth segment.

DBS has unveiled Treasures Private Client, a one-stop shop of private banking and consumer banking solutions.

Analysts say the number of high net worth individuals, with upwards of US$1 million of investable assets, is set to grow by 40 per cent in Asia in the next three years.

Wealth amassed by high net-worth individuals in Asia is seen growing by US$80 billion in the next three years.

In line with one of DBS' strategic priorities to grow a leading wealth management franchise, the bank is rolling out Treasures Private Client.

The bank said the platform will bring the best of both worlds from private and priority banking for high net worth individuals.

DBS also said the new platform will have a team of 200 staffers, of whom 30 to 40 per cent will be new hires.

DBS Treasures MD & regional head Pearlyn Phau said: "We will roll Treasures Private Client out to Singapore and Hong Kong as these are the two key markets.

"We will roll it out to the rest of our key markets in due course. In terms of the growth of our customers in the US$1-3 million wealth bands, we see exponential growth in the next three years. So yes, this will be the target market we're looking at".

DBS said it is the first local bank to put together such an offering for the high net-worth segment.

The bank also said it hopes to see double digit growth in revenues from the new product offering.

DBS Wealth Management group head Tan Su Shan said: "This is going to be one of the big strategies that will help us to grow our strategy in wealth.

"This basically speaks to the fact that we want to be an Asian wealth management bank.

"We hope it will be good, we hope to see double digit growth".

DBS said the offering is being rolled out first in Singapore and Hong Kong and starting next year, in its other key markets such as Indonesia, India and China.

-CNA/wk

- wong chee tat :)

L Capital's Asia investments 'strong'

L Capital's Asia investments 'strong'
Posted: 26 April 2011 2119 hrs

SINGAPORE: L Capital said its investments in Asia, through a US$640 million fund, are expected to outpace returns of those in the US and Europe.

The private equity arm of luxury goods conglomerate LVMH Group, or Moët Hennessy - Louis Vuitton, said it will set up a second Asia based fund.

The higher returns comes on the back of the region's booming retail market.

Growth of Asia's middle class means higher disposable income and global luxury conglomerate LVMH is taking note.

With Europe and America facing anaemic growth, private equity players investing in retail are looking for the opportunity they need in Asia.

L Capital Asia is looking for minority investments in regional consumer brands with what it calls value-for-money and aspirational qualities.

In addition, it has an exit strategy timeline for its acquisitions that seek to deliver returns to its shareholders, unlike its famous parent company which acquires luxury companies wholesale.

The fund said its exit strategies for its portfolio of companies include initial public offerings, strategic sales, as well as mergers and acquisition.

L Capital Asia managing partner Ravi Thakran said: "So we are looking at setting up these companies for these great exits.

"There is no private equity platform that brings the value-add platform of our kind; in terms of what we bring, there is almost no competition".

The fund is expected to invest in middle market deals in the food and beverage, beauty, retail and wellness segments and is not worried about being dwarfed by larger private equity giants who have the capacity to invest in tens of billions despite its relatively small fund size of $640 million.

This is because they have an advantage of relying on a large luxury conglomerate for operating expertise.

L Capital said it does not make drastic makeovers to companies in which they hold stakes.

Singapore based retailer Charles and Keith said it is business as usual for them after the fund bought a 20 per cent stake in the company.

Charles & Keith Group chief financial officer Dicky Koh said: "They don't dictate how we do our business, so they come in as a very good value add partner.

"For us, we still go about with our day-to-day business in a normal way, but we do get a lot of feedback and advice from them whenever we need".

L Capital said it will not be collaborating with its parent company LVMH to avoid possible conflicts of interest.

The fund said it will make about US$200 million of acquisitions this year, and will announce one Chinese and one Indian fashion company investment within two months.

Insofar in the region, managing director Ravi Thakran said it has invested about $90 million in two other acquisitions including Sincere Watches and Hong Kong based Emperor Watch and Jewellery.

-CNA/wk

- wong chee tat :)

La Meyer at 66 Meyer Road offered for en-bloc sale

La Meyer at 66 Meyer Road offered for en-bloc sale
Posted: 27 April 2011 1933 hrs

SINGAPORE: La Meyer at 66 Meyer Road has been for offered for en-bloc sale by tender, property consultants Cushman & Wakefield, handling the sale, said in a statement.

The freehold site in the exclusive Meyer Road vicinity has a land area of 50,560 square feet and is expected to fetch a price above S$98 million.

The statement said developers can build up to a gross floor area of about 78,000 square feet, based on a maximum allowable plot ratio of 1.4.

Cushman and Wakefield said it expects a good reception for the site, especially from mid-sized developers, due to its relative bite-sized and prized location.

The tender exercise will close May 27.

Ms Christina Sim, Director of Investment Sales at Cushman and Wakefield, said; "Sites costing less than S$100 million, provides a comfortable entry level for developers, and there are already a few foreign developers currently evaluating the property."

She said Meyer Road is the "Nassim Road of the East Coast", as it typically seen as a pricing benchmark for the whole of District 15.

"The transacted prices of projects like The Cape, Aalto and The View@Meyer have already crossed the S$2,000 per square feet mark. With developers eager to replenish landbank, we are expecting a blast of enquiries," she said.

- CNA/cc

- wong chee tat :)

URA receives 10 bids for Paya Lebar Rd/Eunos Rd site

URA receives 10 bids for Paya Lebar Rd/Eunos Rd site
By Julie Quek | Posted: 21 April 2011 2013 hrs

SINGAPORE : The Urban Redevelopment Authority (URA) has closed the tender for a commercial site at Paya Lebar Road and Eunos Road 8 after receiving 10 bids.

The highest bid of S$585.6 million came from joint bidders Siong Feng Development, Guthrie, and Sun Venture Commercial.

The land parcel has a site area of 14,851.6 square metres and a maximum permissible gross floor area of 62,377 square metres.

The site was launched for public tender on January 27 and has a lease period of 99 years.

URA said it will evaluate the tender bids and announce the final tender results at a later date.

- CNA/ms

- wong chee tat :)

Om Mani Padme Hum

- wong chee tat :)

Bit locker drive encryption in Windows 7

- wong chee tat :)

Private home prices rose 2.2% in Q1

Private home prices rose 2.2% in Q1
By Travis Teo | Posted: 25 April 2011 1342 hrs

SINGAPORE: Singapore's private home prices moderated again in the first quarter of this year, growing 2.2 per cent compared with 2.7 per cent in the previous quarter.

This is the sixth straight quarter in which growth in private home prices has slowed down.

Final data released on Monday by the Urban Redevelopment Authority (URA) also showed that prices of non-landed residential properties rose 1.7 per cent in the first quarter.

This was slightly lower when compared with the 1.8 per cent increase in the previous quarter.

As for landed homes, URA said prices increased by 3.9 per cent, down from 5.5 per cent in the previous quarter.

Meanwhile, rentals of private residential properties in the first quarter has increased by 1.2 per cent.

Rentals for industrial properties rose 6.3 per cent, followed by office space rentals up by 5.4 per cent and shop rentals which edged up 0.8 per cent.

- CNA/fa

- wong chee tat :)

HDB resale prices increased 1.6% in Q1

HDB resale prices increased 1.6% in Q1
By Linette Lim | Posted: 25 April 2011 1549 hrs

SINGAPORE: HDB resale prices increased in the first quarter of this year, albeit at a slower rate, as property cooling measures kicked in.

The Resale Price Index increased 1.6 per cent in Q1, compared with 2.5 per cent in the previous quarter.

Cash-Over-Valuation premiums dropped nine per cent or S$2,000 to S$21,000 from the previous quarter, with the proportion of resale cases transacting above valuation remaining at 96 per cent.

Data released from HDB also showed that the number of resale transactions fell by about four per cent to 6,228 cases in first quarter of 2011.

Median sublet rents in Q1 remained relatively stable with increases from one-room and five-room flats and decreases from two-room flats.

Subletting transactions rose by eight per cent to 6,365 cases.

The total number of HDB flats approved for subletting rose to about 36,400 units in Q1, compared to about 35,000 units in the previous quarter.

HDB also announced that it will launch another 3,185 flats located in Hougang, Sembawang, Sengkang and Punggol for sale under the April 2011 Build-to-Order (BTO) exercise.

In total, HDB said it will offer 22,000 new BTO flats in 2011 if demand is sustained.

Last year, a total of 16,000 BTO flats were offered.

In addition to the BTO flats, units under the Design, Build & Sell Scheme (DBSS) and the Executive Condominium (EC) Housing Scheme will be offered as well.

An EC site at Punggol with an estimated yield of 700 units, and two DBSS sites at Sengkang and Bendemeer Road with a potential yield of about 1,500 units, will be released for tender in May and June 2011 respectively.

- CNA/fa

- wong chee tat :)

Three residential en bloc sites up for sale

Three residential en bloc sites up for sale
By Jo-ann Huang | Posted: 25 April 2011 1611 hrs

SINGAPORE: Three residential en bloc sites in prime locations have been put up for sale by their sole marketing agent Knight Frank.

The first site is the freehold Dynasty Garden, located on Sixth Avenue in District 10. It has a land area of about 73,300 square feet. Under the 2008 Master Plan, the site is a "three-storey mixed landed". There are currently 33 walk-up apartments with unit sizes ranging from 1,044.1 square feet to 2,604.8 square feet.

The guide price for Dynasty Garden is S$114.8 million or S$1,566 per square foot. Owners will receive about S$2.8 million to S$5.4 million from sale proceeds.

Adjoining Dynasty Garden is 21 Lim Tai See Walk, the second site put up for sale by Knight Frank.

There is a two-storey detached house on the site, which has a land area of 12,691 square feet. The site is designated as a "three-storey mixed landed" under the 2008 Master Plan.

The guide price for 21 Lim Tai See Walk is S$17.5 million or S$1,379 per square foot.

With the combined land area of Dynasty Garden and 21 Lim Tai See Walk amounting to 85,991 square feet, Knight Frank said both sites offer developers an opportunity to build luxurious cluster homes in quiet but convenient locations.

Both sites are situated near dining and shopping amenities in Holland Village, as well as reputable schools such as Raffles Girls' Primary, Nanyang Girls' High School and National Junior College.

Associate director of investment at Knight Frank Ian Loh expects the sites to receive strong interest from developers, due to the limited supply of landed homes and rare large redevelopment sites.

"The freehold sites could house up to 52 strata terrace houses or around 39 strata semi-detached houses," added Mr Loh.

Buyers can opt to tender for either site or both sites.

Tenders for Dynasty Garden and 21 Lim Tai See Walk will close on May 27 at 4pm.

The third site up for sale is Riviera Point - a freehold site sized at 14,580 square feet located on River Valley Road.

The site is a short walk from Somerset MRT Station and some minutes' drive to the central business district, said Knight Frank. It can be redeveloped into a new project with a gross floor area of 49,303 square feet and a gross plot ratio of 3.38. This exceeds the permissible plot ratio of 2.8 under the Master Plan 2008.

Riviera Point can be redeveloped into a boutique apartment complex with 70 units averaging 700 square feet each.

The guide price for the site is S$73.5 million or S$1,491 per square foot per plot ratio. No development charge is payable with a gross floor area of 49,303 square feet for the new project.

With an additional 10 per cent balcony area, the land price could be powered to S$1,417 per square foot per plot ratio, based on a potential gross floor area of about 54,233 square feet.

Knight Frank also expects strong developer interest in Riviera Point, given its prime location and its popularity among foreign buyers.

The tender for Riviera Point closes on May 26 at 3pm.

-CNA/ac

- wong chee tat :)

HDB launches 3,185 new BTO flats

HDB launches 3,185 new BTO flats
By Lois Calderon | Posted: 25 April 2011 1815 hrs

SINGAPORE : The Housing Development Board (HDB) on Monday launched 3,185 new build-to-order flats, forming the largest supply of subsidised housing in a single launch since 2002.

The offer consists of 105 units of two-room, 541 units of three-room, 1,797 units of four-room and 742 units of five-room flats.

At least 95 percent of the units will be allocated to first-time owners, the HDB said in a statement.

Another 6,070 flats will be up for sale in May and June, it added.

The latest numbers would bring the total HDB flat count to 14,100 units by the end of June, already close to 90 percent of the 16,000 flats offered for the whole of last year.

The projects launched on Monday are Anchorvale Cove in Sengkang, Hougang Parkview in Hougang, Montreal Ville in Sembawang and Waterway Terraces II in Punggol.

The Hougang Parkview and Montreal Ville projects are standard flats with a price tag of at least $92,000 for two-room flats, $158,000 for three-room, $248,000 for four-room and $333,000 for five-room units.

Anchorvale Cove and Waterway Terraces II cater to buyers opting for premium flats, which cost from a minimum of $179,000 for three-room units to $354,000 for five-room units.

The latest HDB projects are expected to be completed in the first quarter of 2014 at the earliest.

For 2011, HDB will offer a total of 22,000 new BTO flats if demand is sustained.


- wong chee tat :)

Unfailing Love - Chris Tomlin

- wong chee tat :)

Chris Tomlin - Amazing Grace (My Chains Are Gone)

- wong chee tat :)

Christians and Catholics mark Good Friday

Christians and Catholics mark Good Friday
By Jo-Ann Huang | Posted: 22 April 2011 2159 hrs

SINGAPORE: Christians and Catholics all over the world gathered in churches Friday to mark Good Friday - the day they believe Jesus Christ was crucified.

In Singapore, Catholics of different nationalities commemorated this special day at St Joseph's Church, along Victoria Street.

As the sun set, they rolled into the church grounds and lit candles for their prayers.

Every year, the church is filled to the brim with worshippers, who spill onto the church grounds in candlelight vigil.

They sang hymns and prayed for the sick and needy.

On Sunday, they will mark the resurrection of Christ with Easter Sunday.

- CNA/cc

- wong chee tat :)

COEs up for small and big cars

COEs up for small and big cars
By Millet Enriquez | Posted: 20 April 2011 1628 hrs

SINGAPORE: Certificates of Entitlement (COE) premiums in the big and small car categories rose on Wednesday in the second bidding exercise in April.

The biggest increase was in the big cars category (above 1600cc), which rose by S$1,800 to S$56,801.

The premium for small cars (1600cc and below) also rose, by S$788 to S$44,000.

The COE price for motorcycle saw a slight increase of S$12 to S$2,502.

Meanwhile, the COE in the Open Category dropped by S$1,099 to S$56,001.

The premium for goods vehicles and buses fell by S$4,289 to S$23,900.

- CNA/ir

- wong chee tat :)

Installing IIS on Windows 2008 R2

- wong chee tat :)

Chris Tomlin - Indescribable

- wong chee tat :)

Office 365 enters public beta

Office 365 enters public beta

By Peter Bright | Last updated about 18 hours ago

 

Office 365, the rebranded, expanded successor to Microsoft's Business Productivity Online Suite (BPOS), today entered public beta. On top of the cloud-served Exchange Server, SharePoint Server, and Lync Server (formerly Office Communications Online) found in BPOS, Office 365 adds licensing for Office itself, both through Office Web Apps and the full desktop Office 2010 suite.

The service will eventually offer a range of pricing options, each with different levels of functionality; for the beta, services equivalent to two of the pricing tiers, one aimed at professionals and small businesses, the other aimed at enterprises, will be on offer. The small business offering is equivalent to the lowest pricing tier, "Plan P1," which will start at $6 per user per month. This offers e-mail and calendaring, SharePoint collaboration, Lync messaging, and access to the Office Web Apps—notably excluding access to desktop Office 2010.

The enterprise offering is equivalent to what will be the "Plan E3" pricing tier, at $24 per user per month. On top of the features of P1, this includes local licensing rights for the various server applications, Active Directory integration, unlimited e-mail storage, voicemail hosting, 24/7 phone support, and the full Office 2010 Professional Plus suite.

The full range of Office 365 pricing hasn't been announced yet; though enterprise-oriented plans will range from $10 to $27 per user per month, only the bottom P1 plan for small businesses is public at this time. In addition to these price tiers, there will be schemes for kiosk workers—those who do not have their own dedicated computers—starting at $4 per month per user for "Plan K1," which gives access Exchange and SharePoint, and an as-yet unpriced "Plan K2," which adds the Office Web Apps to the K1 scheme. There will also be a plan or plans for educational institutions, though pricing for this has not been announced.

The beta is currently available in 38 countries and 17 languages. Though the beta is open, and all applicants will be accepted, the registration site notes that applicants will have to wait an average of two to four weeks before their account is actually created.


- wong chee tat :)

Installing Safeboot Console and Configuring Remote Connections

- wong chee tat :)

SafeBoot Install

- wong chee tat :)

Eunos slated for S$9.47m makeover

Eunos slated for S$9.47m makeover
By Saifulbahri Ismail | Posted: 16 April 2011 1210 hrs  

SINGAPORE: Residents in Eunos can expect to get a S$9.47 million makeover of their constituency.

2,784 units of HDB flats will benefit from the Neighbourhood Renewal Programme (NRP) in the Aljunied Group Representation Constituency (GRC).

The programme is the third to be introduced in the GRC.

One of the highlights of the programme is a new multi-purpose plaza. The plaza will be surrounded by a wide range of facilities such as elderly fitness corners, an eco-community garden and a bicycle trail.

For the young, an adventure park will also be built.

A poll will be taken from residents to gauge their support before the programme is implemented.

-CNA/ac

- wong chee tat :) 

Om Mani Padme Hum

- wong chee tat :)

Full Moon

Full Moon


- wong chee tat :0

Om Mani Padme Hum

- wong chee tat :)

About the security content of iOS 4.2.7 Software Update for iPhone

• Last Modified: April 14, 2011
• Article: HT4607

Summary

This document describes the security content of iOS 4.2.7 Software Update, which can be downloaded and installed using iTunes.
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.
For information about the Apple Product Security PGP Key, see "How to use the Apple Product Security PGP Key."
Where possible, CVE IDs are used to reference the vulnerabilities for further information.
To learn about other Security Updates, see "Apple Security Updates".

Products Affected

iPhone, Product Security

iOS 4.2.7 Software Update for iPhone

• Certificate Trust Policy
  Available for: iOS 4.2.5 through 4.2.6 for iPhone 4 (CDMA)
  Impact: An attacker with a privileged network position may intercept user credentials or other sensitive information
  Description: Several fraudulent SSL certificates were issued by a Comodo affiliate registration authority. This may allow a man-in-the-middle attacker to redirect connections and intercept user credentials or other sensitive information. This issue is addressed by blacklisting the fraudulent certificates.
  Note: For Mac OS X systems, this issue is addressed with Security Update 2011-002. For Windows systems, Safari relies on the certificate store of the host operating system to determine if an SSL server certificate is trustworthy. Applying the update described in Microsoft Knowledge Base Article 2524375 will cause Safari to regard these certificates as untrusted. The article is available at http://support.microsoft.com/kb/2524375
  

• QuickLook
  Available for: iOS 4.2.5 through 4.2.6 for iPhone 4 (CDMA)
  Impact: Viewing a maliciously crafted Microsoft Office file may lead to an unexpected application termination or arbitrary code execution
  Description: A memory corruption issues existed in QuickLook's handling of Microsoft Office files. Viewing a maliciously crafted Microsoft Office file may lead to an unexpected application termination or arbitrary code execution.
  CVE-ID
  CVE-2011-1417 : Charlie Miller and Dion Blazakis working with TippingPoint's Zero Day Initiative
  

• WebKit
  Available for: iOS 4.2.5 through 4.2.6 for iPhone 4 (CDMA)
  Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
  Description: An integer overflow issue existed in the handling of nodesets. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.
  CVE-ID
  CVE-2011-1290 : Vincenzo Iozzo, Willem Pinckaers, Ralf-Philipp Weinmann, and an anonymous researcher working with TippingPoint's Zero Day Initiative
  

• WebKit
  Available for: iOS 4.2.5 through 4.2.6 for iPhone 4 (CDMA)
  Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
  Description: A use after free issue existed in the handling of text nodes. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.
  CVE-ID
  CVE-2011-1344 : Vupen Security working with TippingPoint's Zero Day Initiative, and Martin Barbella
  

Important: Information about products not manufactured by Apple is provided for information purposes only and does not constitute Apple’s recommendation or endorsement. Please contact the vendor for additional information.

 

 

- wong chee tat :)

About the security content of iOS 4.3.2 Software Update

• Last Modified: April 14, 2011
• Article: HT4606

Summary

This document describes the security content of iOS 4.3.2 Software Update, which can be downloaded and installed using iTunes.
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.
For information about the Apple Product Security PGP Key, see "How to use the Apple Product Security PGP Key."
Where possible, CVE IDs are used to reference the vulnerabilities for further information.
To learn about other Security Updates, see "Apple Security Updates".

Products Affected

iPhone, iPad, iPod touch, Product Security

iOS 4.3.2 Software Update

• Certificate Trust Policy
  Available for: iOS 3.0 through 4.3.1 for iPhone 3GS and later, iOS 3.1 through 4.3.1 for iPod touch (3rd generation) and later, iOS 3.2 through 4.3.1 for iPad
  Impact: An attacker with a privileged network position may intercept user credentials or other sensitive information
  Description: Several fraudulent SSL certificates were issued by a Comodo affiliate registration authority. This may allow a man-in-the-middle attacker to redirect connections and intercept user credentials or other sensitive information. This issue is addressed by blacklisting the fraudulent certificates.
  Note: For Mac OS X systems, this issue is addressed with Security Update 2011-002. For Windows systems, Safari relies on the certificate store of the host operating system to determine if an SSL server certificate is trustworthy. Applying the update described in Microsoft Knowledge Base Article 2524375 will cause Safari to regard these certificates as untrusted. The article is available at http://support.microsoft.com/kb/2524375
  

• libxslt
  Available for: iOS 3.0 through 4.3.1 for iPhone 3GS and later, iOS 3.1 through 4.3.1 for iPod touch (3rd generation) and later, iOS 3.2 through 4.3.1 for iPad
  Impact: Visiting a maliciously crafted website may lead to the disclosure of addresses on the heap
  Description: libxslt's implementation of the generate-id() XPath function disclosed the address of a heap buffer. Visiting a maliciously crafted website may lead to the disclosure of addresses on the heap, which may aid in bypassing address space layout randomization protection. This issue is addressed by generating an ID based on the difference between the addresses of two heap buffers.
  CVE-ID
  CVE-2011-0195 : Chris Evans of Google Chrome Security Team
  

• QuickLook
  Available for: iOS 3.0 through 4.3.1 for iPhone 3GS and later, iOS 3.1 through 4.3.1 for iPod touch (3rd generation) and later, iOS 3.2 through 4.3.1 for iPad
  Impact: Viewing a maliciously crafted Microsoft Office file may lead to an unexpected application termination or arbitrary code execution
  Description: A memory corruption issue existed in QuickLook's handling of Microsoft Office files. Viewing a maliciously crafted Microsoft Office file may lead to an unexpected application termination or arbitrary code execution.
  CVE-ID
  CVE-2011-1417 : Charlie Miller and Dion Blazakis working with TippingPoint's Zero Day Initiative
  

• WebKit
  Available for: iOS 3.0 through 4.3.1 for iPhone 3GS and later, iOS 3.1 through 4.3.1 for iPod touch (3rd generation) and later, iOS 3.2 through 4.3.1 for iPad
  Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
  Description: An integer overflow issue existed in the handling of nodesets. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.
  CVE-ID
  CVE-2011-1290 : Vincenzo Iozzo, Willem Pinckaers, Ralf-Philipp Weinmann, and an anonymous researcher working with TippingPoint's Zero Day Initiative
  

• WebKit
  Available for: iOS 3.0 through 4.3.1 for iPhone 3GS and later, iOS 3.1 through 4.3.1 for iPod touch (3rd generation) and later, iOS 3.2 through 4.3.1 for iPad
  Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
  Description: A use after free issue existed in the handling of text nodes. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.
  CVE-ID
  CVE-2011-1344 : Vupen Security working with TippingPoint's Zero Day Initiative, and Martin Barbella
  

Important: Mention of third-party websites and products is for informational purposes only and constitutes neither an endorsement nor a recommendation. Apple assumes no responsibility with regard to the selection, performance or use of information or products found at third-party websites. Apple provides this only as a convenience to our users. Apple has not tested the information found on these sites and makes no representations regarding its accuracy or reliability. There are risks inherent in the use of any information or products found on the Internet, and Apple assumes no responsibility in this regard. Please understand that a third-party site is independent from Apple and that Apple has no control over the content on that website. Please contact the vendor for additional information.

 

 

 

- wong chee tat :)

Applied Materials, IME to set up joint facility

Applied Materials, IME to set up joint facility
By Rachel Kelly | Posted: 13 April 2011 1737 hrs

SINGAPORE: Global manufacturing solutions provider, Applied Materials, and Singapore's Institute of Microelectronics (IME) are to set up an Advanced Packaging Center.

Applied Materials and IME - a research institute under the Agency for Science, Technology and Research (A*STAR) - Wednesday signed a research collaboration agreement for the joint facility which will develop new tools and integration schemes for growing wafer-level packaging market.

Located in Singapore's Science Park II, the Center will have a full line of Wafer Level Packaging (WLP) processing equipment and will conduct research in semiconductor hardware, process, and device structures.

Mr Lim Chuan Poh, Chairman of A*STAR, said, "The Center leverages the deep R&D capabilities in 3D-TSV, built by IME over the years, to support advanced packaging tool development for Applied Materials to meet the unique needs of the company and our economy. The setting up of this Center will help advance Singapore's aspiration to be a global R&D hub and Asia's Innovation Capital."

A signing ceremony for the collaboration was officiated by Singapore's Minister for Trade and Industry, Mr Lim Hng Kiang.

- CNA/cc

- wong chee tat :)

Talent, cost management are key issues for CFOs: survey

Talent, cost management are key issues for CFOs: survey
By Jo-ann Huang | Posted: 13 April 2011 2124 hrs

SINGAPORE : Finding the right person for the job is getting more challenging, according to recent polls of chief financial officers (CFOs) in Asia and across the world.

The studies showed that more than three-quarters of CFOs surveyed are concerned about hiring and retaining the right finance professionals.

One study, which was conducted by business analytics firm SAP, revealed that the top three challenges faced by Asian CFOs for 2011 and 2012 were cost, talent and risk management.

Another study, conducted by the Association of Chartered Certified Accountants (ACCA) and accounting firm KPMG, said there is a lack of talent management strategy in financial departments globally.

The studies also revealed that rising costs are a key concern among CFOs.

CFOs said quality finance professionals are hard to find and retain. They said most finance professionals lack sufficient financial and commercial expertise, as well as negotiation abilities.

Studies by the ACCA also revealed that only 20 percent of chief financial officers surveyed have a talent management strategy going forward.

Chia Chey Hui, Country CFO, Singapore, ASEAN & Pacific, Phillips, said: "This will be a challenge that a lot of companies will face in the longer term. These days, people can get jobs easily elsewhere, so there is quite high turnover rate if this is not managed properly."

To remain competitive, CFOs from global firms are also grappling with rising costs.

Some firms said passing down the higher costs to their customers is a last resort.

Marc Seiler, executive director of finance & control, Nestle (Malaysia) Berhad, said: "This year is a challenging year from a commodities perspective.

"At Nestle, we use a lot of commodities in the recipes of our products - coffee, cocoa, palm oil, sugar, etc, which have shown a very steep increase in costs over the past year or so. So ... (there are) a lot of pressures on our cost structure.

With the economic crisis bringing more scrutiny to the role of CFOs, they are under pressure to focus on profit margins.

CFOs are also looking at ways to boost productivity.

S V Padmanabhan, senior vice president (Finance & Accounts), Olam International, said: "The basic data entry part of the information we have automated - that significantly insures that our information in terms of profit margins, positions and costs are available to the business leaders on a timely basis, which will help them to take the right decision for profitable growth.

Studies by SAP also revealed that complying with ever increasing corporate governance standards is also becoming a key challenge for CFOs.

- AFP/al

- wong chee tat :)

Om Mani Padme Hum

- wong chee tat :)

Om Mani Padme Hum

- wong chee tat :)

Lotus Notes 8.5: Links & Hotspots

In Lotus Notes 8.5 client, we can create a link to point to another location.

It is simple but it took me some time to figure it out. A quick search bring us to the following:

Here are the steps to create the same.

1) Enter the text you want to appear as the hyperlink in the mail message (eg: Google)

2) Select the text and click on Create –>; Hotspot ->; Link hotspot

3) Enter the desired URL in the Value text box. (eg: www.google.com) and close it

4) It will add the hotspot and select ‘Show border around hotspot’ to display a background highlighting around the link. Otherwise apply underline (press Ctl + U)

5) Send the mail to the recipients

Note: The link will not be active until you send the mail. If you click on the hotspot before sending it, it may not work.

And another link:

One of the new user-friendly features of the IBM Lotus Notes 8.5.1 client is the new menu command of "Create >> Hyperlink"



This should make things much easier for end users who want to create hyperlinks in a Notes mail message or in vanilla, frameless Notes client based applications.

But for users and developers who create web-based applications there is an important feature missing if you use this menu option. What is missing? The ability to set a target frame like you can using "Create >> Hotspot >> Link Hotspot":



This is not to say the end user cannot fix this problem. They can just right click on the linked text and select "Hotspot Properties":

This does not bring them back to the dialog box that displayed when they created the hyperlink, but to the hotspot properties dialog box, where they can enter the target window ("_blank" for a new browser window):



The downside to this is that users may get confused by the different dialog boxes, and most probably do not know the syntax to set a target window. And it is not just the Notes client where you will see this. There are many instances of Web 2.0 editors where you cannot set the target when you create the hyperlink, including Google Blogger:



In an ideal world, what should happen with this new "Create Hyperlink" dialog box? There should be a single checkbox with a label of "Open link in new browser window", along with an action pop-up message:



There is something else to point out as well, something that will require additional user education. If you click on some text that has a hotspot created, the menu system ads a "Hotspot" entry, and the option to remove the hotspot:



But if you created the link using the "Create Hyperlink" menu, you do not get a "Hyperlink" menu item. You get the same "Hotspot" menu item:



So as you work with your users in setting up Lotus Notes 8.5.1, be sure to keep these differences in mind.

By the way, it worked in Lotus Notes 8.5.2 too.




 - wong chee tat :)

Outdoor activities can help prevent myopia in children: study

Outdoor activities can help prevent myopia in children: study
By Alvina Soh | Posted: 11 April 2011 0002 hrs

SINGAPORE : The National University Health System (NUHS) is urging children in Singapore to get out and play, in its latest myopia prevention study.

The year-long study aims to find out if spending more time outdoors can help prevent myopia in children who are between six and 10 years old.

Singapore has one of the highest rates of myopia in the world.

NUHS said this is worrying, as half of the children are myopic by the time they turn 10.

About eight in 10 will have myopia when they reach 18.

It added that the average age of the onset of myopia is eight years old.

Professor Saw Seang Mei, vice-dean for research at the National University Health System, said: "We want to target a group which is susceptible to the environmental factors, so if we increase the outdoor time, it may be able to prevent the development and progression of myopia in this age range."

NUHS said there has been a recent rise in myopia trends in recent years.

In the study, children will take part in weekly activities in the parks - organised by the National Parks Board - such as guided walks and scavenger hunts.

Tay Boon Sin, assistant director at the National Parks Board, said: "Kids nowadays do not spend enough time outdoors, so we really hope that by spending more time outdoors, not only do they get in touch with our parks, nature, they can actually have a more healthy lifestyle."

The study is expected to be completed by April 2012.

The findings will be used to develop a programme to reduce myopia, obesity and other chronic illnesses in Singapore children.

- CNA/ms

- wong chee tat :)

Asia dominates listings in global IPO update

Asia dominates listings in global IPO update
By Travis Teo | Posted: 11 April 2011 1530 hrs

SINGAPORE: US private equity-backed listings drove global IPO activity in the first quarter of this year, with the New York Stock Exchange (NYSE) taking the lead.

But Asia still dominates listings, with the Shenzhen Stock Exchange coming in second and the Singapore Exchange ranking three in terms of total capital raised globally.

That is according to Ernst & Young's first quarter Global IPO update.

The services firm added that the last few weeks of the quarter saw choppy stock markets spiked by the Japanese disaster and Middle East political unrest. This led to a slowdown in overall pace of global IPO activity.

But, in a statement, Ernst & Young said that there is still a healthy pipeline of companies waiting to tap in to the capital markets.

In the first three months of the year, global IPO activity saw 290 deals worth US$46.1 billion, down 14 per cent compared with the same period last year.

For the first time since 2008, the NYSE took the lead among world exchanges, raising US$13.8 billion of the total capital, followed by the US$11.2 billion capital raised on the Shenzhen Stock Exchange and US$5.6 billion raised by the Singapore Exchange, largely due to the US$5.5 billion listing of Hutchison Port Holdings.

Ernst & Young said this reflects SGX's strength in sectors such as shipping and maritime, commodities, REITs and business trusts.

-CNA/ac

- wong chee tat :)

Banks eye 'young professional' market

Banks eye 'young professional' market
By Jo-ann Huang | Posted: 11 April 2011 2230 hrs

SINGAPORE: More young professionals are climbing up the corporate ladder, and that emerging affluent market is a new consumer banking segment in Asia.

With as many as 500 million emerging affluent individuals in the region, banks are stepping up their efforts to capture this growing customer base.

Citibank is using customised banking to target the emerging affluent segment in Asia.

It has launched new services including a 24-hour online secure e-chat with customer service reps, free global fund transfers to other Citibank accounts, and dedicated personal bankers.

Catering to the needs of this segment is one way to retain customers in the long-run.

In the last three years, more than 50 per cent of customers from their Citigold banking segment, which comprises individuals with between S$200,000 to S$1 million in investible assets, have upgraded from the emerging affluent or the Personal Banking segment.

Citibank Singapore country marketing director Jacquelyn Tan said: "We've seen a lot of emerging trends where increasingly our customers within this segment are increasingly more mobile.

"Our customers as well in such a fast-paced environment demand.....a high responsiveness... accessibility as well as convenience and personalised services for their banking needs.

Citibank is targeting countries like China, India and Malaysia for their new emerging affluent services.

Other banks are also jumping in on this trend.

By targeting the emerging affluent segment, UOB for instance, expects profits from this segment as well as its high net worth individual market to reach 50 per cent from 35 per cent in four years.

Standard Chartered launched its preferred banking service for the region's emerging affluent individuals in August last year.

The bank is hiring 800 staff by early 2012 to cater to this growing customer base.

However, banks have differing standards and definitions for the mass affluent or the emerging affluent market.

Citibank considers individuals with a net worth of US$10,000 to US$100,000 to be "emerging affluent".

For Standard Chartered, emerging affluent individuals are required to have investible assets of US$100,000 and above.

For products and services, analysts said US and European banks currently dominate the Asian emerging affluent market.

Fitch Ratings director of Financial Institutions Alfred Chan said: "They have all kinds of sophisticated products; some risky, some are less risky as we have learned from this crisis, so asian banks really need to pick up".

Emerging affluent individuals make up one-third of Asia's consumer banking revenue,and banks forecast this figure to rise.

They project an eight to 15 per cent growth in revenue from Asia's emerging affluent segment annually for the next several years.

-CNA/wk

- wong chee tat :)

Tim Hughes - Happy Day

- wong chee tat :)

Electricity price hike could have been higher

Electricity price hike could have been higher
Posted: 11 April 2011 1733 hrs

SINGAPORE: The 6.1 per cent electricity price hike for the next three months from April to June may have hit some pockets.

But Senior Minister of State for Trade and Industry S Iswaran said in Parliament on Monday tariffs would have been even higher, if not for the strong Singapore dollar.

Unrest in the Middle East and the nuclear crisis in Japan have caused oil prices to increase by about 14 per cent to S$113 per barrel in the first quarter of the year.

But any impact on electricity prices here has been cushioned by global currency movements.

"An appreciating Singapore dollar has helped to cushion the effects of rising fuel oil prices which are denominated in US dollars," Mr Iswaran said.

"Since the beginning of 2010, the Singapore dollar has appreciated by about eight per cent against the US dollar.

"Without this, the electricity tariff in the second quarter of this year would have been five per cent higher."

Mr Iswaran also said the move away from oil-fired steam plants by power generation companies since 2001 to more efficient gas-fired combined cycle gas turbines has also reduced the impact of price hikes in oil.

"Had we continued to use steam plants, the electricity tariff today would be about 15 per cent higher," he said.

Assuming that household electricity consumption does not change, the six per cent tariff increase means that those living in four-room flats would have to pay on average, S$4.85 more each month.

But Mr Iswaran said there is targeted assistance for those who have trouble paying their bills.

This year alone, the government will give out S$250 million in utilities rebates, starting from this month.

Those in four-room flats will receive S$320 -- enough to offset their bill for the next three-and-a-half months.

Those living in three-room flats will get S$340 in rebates to cover five months' worth of electricity consumption.

Overall, the amount given to families in three-room flats is five-and-a-half times more than the actual increase in their bills in the past year.

Since 2007, about S$800 million worth of electricity rebates have been given to some 800,000 households.

Mr Iswaran added that there are programmes to help businesses become more efficient in energy use.

These include schemes to raise awareness on energy management and available energy efficient technologies, provide support for companies which are trying to adopt such technologies, train energy management professionals, and encourage sharing of best practices in energy efficiency among companies.

These are administered by the Energy Efficiency Programme Office (E2PO), a multi-agency committee led by the National Environment Agency and the Energy Market Authority.

-CNA/wk

- wong chee tat :)

Volume Licensing

April 09, 2011 12:20 AM

Q: I have volume licensing on my machines. Can I purchase machines without Windows licenses to avoid paying twice?

 

John Savill

Windows IT Pro

InstantDoc ID #130054

A: When you have volume licensing (and, potentially, rights to editions like Enterprise), you're not paying again for licenses. Essentially, the volume licensing agreement requires an existing valid Windows license that the volume licensing upgrades. It's therefore important that even if you have volume licensing, you purchase devices with valid licenses. Or you'd have to purchase retail versions, which would be more expensive than what you get from an OEM with a new PC.


- wong chee tat :)

Microsoft Security Bulletin Advance Notification for April 2011

Published: April 07, 2011

Microsoft Security Bulletin Advance Notification issued: April 7, 2011
Microsoft Security Bulletins to be issued: April 12, 2011
This is an advance notification of security bulletins that Microsoft is intending to release on April 12, 2011.
This bulletin advance notification will be replaced with the April bulletin summary on April 12, 2011. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.
To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications.
Microsoft will host a webcast to address customer questions on the security bulletins on April 13, 2011, at 11:00 AM Pacific Time (US & Canada). Register now for the April Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.
Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.

Bulletin Information

Executive Summaries

This advance notification provides a number as the bulletin identifier, because the official Microsoft Security Bulletin numbers are not issued until release. The bulletin summary that replaces this advance notification will have the proper Microsoft Security Bulletin numbers (in the MSyy-xxx format) as the bulletin identifier.
The following table summarizes the security bulletins for this month in order of severity.
For details on affected software, see the next section, Affected Software.

Bulletin ID	Maximum Severity Rating and Vulnerability Impact	Restart Requirement	Affected Software
Bulletin 1	Critical Remote Code Execution	Requires restart	Microsoft Windows, Internet Explorer
Bulletin 2	Critical Remote Code Execution	Requires restart	Microsoft Windows
Bulletin 3	Critical Remote Code Execution	Requires restart	Microsoft Windows
Bulletin 4	Critical Remote Code Execution	May require restart	Microsoft Windows
Bulletin 5	Critical Remote Code Execution	May require restart	Microsoft Windows
Bulletin 6	Critical Remote Code Execution	May require restart	Microsoft Windows, Microsoft Office
Bulletin 7	Critical Remote Code Execution	Requires restart	Microsoft Windows
Bulletin 8	Critical Remote Code Execution	May require restart	Microsoft Windows
Bulletin 9	Critical Remote Code Execution	Requires restart	Microsoft Windows
Bulletin 10	Important Remote Code Execution	May require restart	Microsoft Office
Bulletin 11	Important Remote Code Execution	May require restart	Microsoft Office, Microsoft Server Software
Bulletin 12	Important Remote Code Execution	May require restart	Microsoft Office
Bulletin 13	Important Remote Code Execution	May require restart	Microsoft Windows
Bulletin 14	Important Remote Code Execution	May require restart	Microsoft Developer Tools and Software
Bulletin 15	Important Information Disclosure	Requires restart	Microsoft Windows
Bulletin 16	Important Remote Code Execution	May require restart	Microsoft Windows
Bulletin 17	Important Elevation of Privilege	Requires restart	Microsoft Windows

Top of section

Affected Software

This advance notification provides a number as the bulletin identifier, because the official Microsoft Security Bulletin numbers are not issued until release. The bulletin summary that replaces this advance notification will have the proper Microsoft Security Bulletin numbers (in the MSyy-xxx format) as the bulletin identifier.
The following tables list the bulletins in order of major software category and severity.
How do I use these tables?
Use these tables to learn about the security updates that you may need to install. You should review each software program or component listed to see whether any security updates pertain to your installation. If a software program or component is listed, then the severity rating of the security update is also listed.
Note You may have to install several security updates for a single vulnerability. Review the whole column for each bulletin identifier that is listed to verify the updates that you have to install, based on the programs or components that you have installed on your system.

Windows Operating System and Components

Top of section

Microsoft Office Suites and Software

Microsoft Office Suites and Components
Bulletin Identifier	Bulletin 6	Bulletin 10	Bulletin 11	Bulletin 12
Aggregate Severity Rating	Important	Important	Important	Important
Microsoft Office XP Service Pack 3	Microsoft Office XP Service Pack 3 (Important)	Microsoft Excel 2002 Service Pack 3 (Important)	Microsoft PowerPoint 2002 Service Pack 3 (Important)	Microsoft Office XP Service Pack 3 (Important)
Microsoft Office 2003 Service Pack 3	Not applicable	Microsoft Excel 2003 Service Pack 3 (Important)	Microsoft PowerPoint 2003 Service Pack 3 (Important)	Microsoft Office 2003 Service Pack 3 (Important)
Microsoft Office 2007 Service Pack 2	Not applicable	Microsoft Excel 2007 Service Pack 2 (Important)	Microsoft PowerPoint 2007 Service Pack 2 (Important)	Microsoft Office 2007 Service Pack 2 (Important)
Microsoft Office 2010 (32-bit editions)	Not applicable	Microsoft Excel 2010 (32-bit editions) (Important)	Microsoft PowerPoint 2010 (32-bit editions) (Important)	Not applicable
Microsoft Office 2010 (64-bit editions)	Not applicable	Microsoft Excel 2010 (64-bit editions) (Important)	Microsoft PowerPoint 2010 (64-bit editions) (Important)	Not applicable
Microsoft Office for Mac
Bulletin Identifier	Bulletin 6	Bulletin 10	Bulletin 11	Bulletin 12
Aggregate Severity Rating	None	Important	Important	Important
Microsoft Office 2004 for Mac	Not applicable	Microsoft Office 2004 for Mac (Important)	Microsoft Office 2004 for Mac (Important)	Microsoft Office 2004 for Mac (Important)
Microsoft Office 2008 for Mac	Not applicable	Microsoft Office 2008 for Mac (Important)	Microsoft Office 2008 for Mac (Important)	Microsoft Office 2008 for Mac (Important)
Microsoft Office for Mac 2011	Not applicable	Microsoft Office for Mac 2011 (Important)	Microsoft Office for Mac 2011 (Important)	Not applicable
Open XML File Format Converter for Mac	Not applicable	Open XML File Format Converter for Mac (Important)	Open XML File Format Converter for Mac (Important)	Open XML File Format Converter for Mac (Important)
Other Office Software
Bulletin Identifier	Bulletin 6	Bulletin 10	Bulletin 11	Bulletin 12
Aggregate Severity Rating	None	Important	Important	None
Microsoft Excel Viewer Service Pack 2	Not applicable	Microsoft Excel Viewer Service Pack 2 (Important)	Not applicable	Not applicable
Microsoft PowerPoint Viewer 2007 Service Pack 2	Not applicable	Not applicable	Microsoft PowerPoint Viewer 2007 Service Pack 2 (Important)	Not applicable
Microsoft PowerPoint Viewer	Not applicable	Not applicable	Microsoft PowerPoint Viewer (Important)	Not applicable
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2	Not applicable	Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2 (Important)	Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2 (Important)	Not applicable

Note for Bulletin 6
See also other software categories under this section, Affected Software and Download Locations, for more update files under the same bulletin identifier. This bulletin spans more than one software category.
Note for Bulletin 11
See also other software categories under this section, Affected Software and Download Locations, for more update files under the same bulletin identifier. This bulletin spans more than one software category.

Top of section

Microsoft Server Software

Microsoft Office Web Apps
Bulletin Identifier	Bulletin 11
Aggregate Severity Rating	Important
Microsoft Office Web Apps	Microsoft PowerPoint Web App (Important)

Note for Bulletin 11
See also other software categories under this section, Affected Software and Download Locations, for more update files under the same bulletin identifier. This bulletin spans more than one software category.

Top of section

Microsoft Developer Tools and Software

Microsoft Visual Studio
Bulletin Identifier	Bulletin 14
Aggregate Severity Rating	Important
Microsoft Visual Studio .NET 2003 Service Pack 1	Microsoft Visual Studio .NET 2003 Service Pack 1 (Important)
Microsoft Visual Studio 2005 Service Pack 1	Microsoft Visual Studio 2005 Service Pack 1 (Important)
Microsoft Visual Studio 2008 Service Pack 1	Microsoft Visual Studio 2008 Service Pack 1 (Important)
Microsoft Visual Studio 2010	Microsoft Visual Studio 2010 (Important)
Microsoft Visual C++ 2005 Service Pack 1	Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (Important)
Microsoft Visual C++ 2008 Service Pack 1	Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (Important)
Microsoft Visual C++ 2010	Microsoft Visual C++ 2010 Redistributable Package (Important)

Top of section

Top of section

Detection and Deployment Tools and Guidance

Security Central
Manage the software and security updates you need to deploy to the servers, desktop, and mobile computers in your organization. For more information see the TechNet Update Management Center. The TechNet Security Center provides additional information about security in Microsoft products. Consumers can visit Security At Home, where this information is also available by clicking "Latest Security Updates".
Security updates are available from Microsoft Update and Windows Update. Security updates are also available at the Microsoft Download Center. You can find them most easily by doing a keyword search for "security update".
For customers of Microsoft Office for Mac, Microsoft AutoUpdate for Mac can help keep your Microsoft software up to date. For more information about using Microsoft AutoUpdate for Mac, see Check for software updates automatically.
Finally, security updates can be downloaded from the Microsoft Update Catalog. The Microsoft Update Catalog provides a searchable catalog of content made available through Windows Update and Microsoft Update, including security updates, drivers and service packs. By searching using the security bulletin number (such as, "MS07-036"), you can add all of the applicable updates to your basket (including different languages for an update), and download to the folder of your choosing. For more information about the Microsoft Update Catalog, see the Microsoft Update Catalog FAQ.
Detection and Deployment Guidance
Microsoft provides detection and deployment guidance for security updates. This guidance contains recommendations and information that can help IT professionals understand how to use various tools for detection and deployment of security updates. For more information, see Microsoft Knowledge Base Article 961747.
Microsoft Baseline Security Analyzer
The Microsoft Baseline Security Analyzer (MBSA) allows administrators to scan local and remote systems for missing security updates as well as common security misconfigurations. For more information about MBSA, visit Microsoft Baseline Security Analyzer.
Windows Server Update Services
By using Windows Server Update Services (WSUS), administrators can quickly and reliably deploy the latest critical updates and security updates for Windows 2000 operating systems and later, Office XP and later, Exchange Server 2003, and SQL Server 2000 to Windows 2000 and later operating systems.
For more information about how to deploy this security update using Windows Server Update Services, visit Windows Server Update Services.
System Center Configuration Manager 2007
Configuration Manager 2007 Software Update Management simplifies the complex task of delivering and managing updates to IT systems across the enterprise. With Configuration Manager 2007, IT administrators can deliver updates of Microsoft products to a variety of devices including desktops, laptops, servers, and mobile devices.
The automated vulnerability assessment in Configuration Manager 2007 discovers needs for updates and reports on recommended actions. The Software Update Management in Configuration Manager 2007 is built on Microsoft Windows Software Update Services (WSUS), a time-tested update infrastructure that is familiar to IT administrators worldwide. For more information about how administrators can use Configuration Manager 2007 to deploy updates, see Software Update Management. For more information about Configuration Manager, visit System Center Configuration Manager.
Systems Management Server 2003
Microsoft Systems Management Server (SMS) delivers a highly-configurable enterprise solution for managing updates. By using SMS, administrators can identify Windows-based systems that require security updates and to perform controlled deployment of these updates throughout the enterprise with minimal disruption to end users.
Note System Management Server 2003 is out of mainstream support as of January 12, 2010. For more information on product lifecycles, visit Microsoft Support Lifecycle. The next release of SMS, System Center Configuration Manager 2007, is now available; see the earlier section, System Center Configuration Manager 2007.
For more information about how administrators can use SMS 2003 to deploy security updates, see Scenarios and Procedures for Microsoft Systems Management Server 2003: Software Distribution and Patch Management. For information about SMS, visit the Microsoft Systems Management Server TechCenter.
Note SMS uses the Microsoft Baseline Security Analyzer to provide broad support for security bulletin update detection and deployment. Some software updates may not be detected by these tools. Administrators can use the inventory capabilities of SMS in these cases to target updates to specific systems. For more information about this procedure, see Deploying Software Updates Using the SMS Software Distribution Feature. Some security updates require administrative rights following a restart of the system. Administrators can use the Elevated Rights Deployment Tool (available in the SMS 2003 Administration Feature Pack) to install these updates.
Update Compatibility Evaluator and Application Compatibility Toolkit
Updates often write to the same files and registry settings required for your applications to run. This can trigger incompatibilities and increase the time it takes to deploy security updates. You can streamline testing and validating Windows updates against installed applications with the Update Compatibility Evaluator components included with Application Compatibility Toolkit.
The Application Compatibility Toolkit (ACT) contains the necessary tools and documentation to evaluate and mitigate application compatibility issues before deploying Microsoft Windows Vista, a Windows Update, a Microsoft Security Update, or a new version of Windows Internet Explorer in your environment.

Top of section

Other Information

Microsoft Windows Malicious Software Removal Tool

Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

Top of section

Non-Security Updates on MU, WU, and WSUS

For information about non-security releases on Windows Update and Microsoft Update, please see:

•	Microsoft Knowledge Base Article 894199: Description of Software Update Services and Windows Server Update Services changes in content. Includes all Windows content.
•	Updates from Past Months for Windows Server Update Services. Displays all new, revised, and rereleased updates for Microsoft products other than Microsoft Windows.

Top of section

Microsoft Active Protections Program (MAPP)

To improve security protections for customers, Microsoft provides vulnerability information to major security software providers in advance of each monthly security update release. Security software providers can then use this vulnerability information to provide updated protections to customers via their security software or devices, such as antivirus, network-based intrusion detection systems, or host-based intrusion prevention systems. To determine whether active protections are available from security software providers, please visit the active protections Web sites provided by program partners, listed in Microsoft Active Protections Program (MAPP) Partners.

Top of section

Security Strategies and Community

Update Management Strategies
Security Guidance for Update Management provides additional information about Microsoft’s best-practice recommendations for applying security updates.
Obtaining Other Security Updates
Updates for other security issues are available from the following locations:

•	Security updates are available from Microsoft Download Center. You can find them most easily by doing a keyword search for "security update".
•	Updates for consumer platforms are available from Microsoft Update.
•	You can obtain the security updates offered this month on Windows Update, from Download Center on Security and Critical Releases ISO CD Image files. For more information, see Microsoft Knowledge Base Article 913086.

IT Pro Security Community
Learn to improve security and optimize your IT infrastructure, and participate with other IT Pros on security topics in IT Pro Security Community.

Top of section

Support

•	The affected software listed have been tested to determine which versions are affected. Other versions are past their support life cycle. To determine the support life cycle for your software version, visit Microsoft Support Lifecycle.
•	Customers in the U.S. and Canada can receive technical support from Security Support or 1-866-PCSAFETY. There is no charge for support calls that are associated with security updates. For more information about available support options, see Microsoft Help and Support.
•	International customers can receive support from their local Microsoft subsidiaries. There is no charge for support that is associated with security updates. For more information about how to contact Microsoft for support issues, visit International Help and Support.

Top of section

Disclaimer

The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Top of section

- wong chee tat :)