-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA06-129A
Microsoft Windows Vulnerabilities
Original release date: May 9, 2006
Last revised: --
Source: US-CERT
Systems Affected
* Microsoft Windows
Overview
Critical vulnerabilities in Macromedia Flash player may allow an
attacker to take control of your computer.
Solution
Apply Update
Microsoft has provided an update to remedy these vulnerabilities.
To obtain the update, visit the Microsoft Update web site. US-CERT
also recommends enabling Automatic Updates.
Description
Some features of Macromedia products contain critical
vulnerabilities. If an attacker can convince you to visit a
malicious web site, the attacker may be able to take control of
your computer or cause it to crash.
For more technical information, see US-CERT Technical Alert
TA06-129A.
References
* Microsoft Security Bulletin Summary for May 2006 -
<http://www.microsoft.com/technet/security/bulletin/ms06-may.mspx>
* US-CERT Cyber Security Alert SA06-075A -
<http://www.us-cert.gov/cas/alerts/SA06-075A.html>
* US-CERT Vulnerability Note VU#945060 -
<http://www.kb.cert.org/vuls/id/945060>
* US-CERT Vulnerability Note VU#146284 -
<http://www.kb.cert.org/vuls/id/146284>
* CVE-2006-0024 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0024>
* CVE-2005-2628 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2628>
* Microsoft Update - <https://update.microsoft.com/microsoftupdate>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA06-129A.html>
____________________________________________________________________
Feedback can be directed to US-CERT. Please send email to
<cert@cert.org> with "SA06-129A Feedback VU#303452" in the subject.
____________________________________________________________________
Mailing list information:
<http://www.us-cert.gov/cas/>
____________________________________________________________________
Produced 2006 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
May 09, 2006: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRGD4eH0pj593lg50AQKMIwf/Uq1sWWjDJY7g+wDgW3trnmWn+C0nfYlR
WdkFrQ+QZmRLyIXgQLQs1opRuHtdhYX6hm1H5II5tTK059WMFFGr6MZqlmiu7jjq
JvfC0/7iEHS7S1Vue4c+cb9CwbyasNtT6aPA0N7Plsp8KsGNB00JASEF16xncbRT
pAGwrSQa+fX2pi7JEAdWs9qr0aehKnvQWNbRUpG1vHDFoBrJC0zbEFVhKQ1mswH+
IkrMlhjYP/lAsxtMAXjqHlAmjs2wE9hP2kM5zukHZKx0cgv4asO8QmtPdiEPoLTO
2EDLpWjUE9uT6bSm4tBqw0u8AYFKjKJugODv0bAftt8vjQyZNkDV4A==
=8rDE
-----END PGP SIGNATURE-----
