-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA06-192A
Microsoft Windows, Office, and IIS Vulnerabilities
Original release date: July 11, 2006
Last revised: --
Source: US-CERT
Systems Affected
* Microsoft Windows
* Microsoft Office
* Microsoft Office for Mac
* Microsoft Access
* Microsoft Excel and Excel Viewer
* Microsoft FrontPage
* Microsoft Outlook
* Microsoft PowerPoint
* Microsoft Project
* Microsoft Publisher
* Microsoft Visio
* Microsoft Word and Word Viewer
Overview
Critical vulnerabilities in Microsoft Windows and Microsoft Office
may allow an attacker to take control of your computer.
Solution
Apply Update
Microsoft has provided updates to remedy these vulnerabilities. To
obtain these updates, visit the Microsoft Update web site. US-CERT
also recommends enabling Automatic Updates.
Microsoft Office 2000 users must visit the Microsoft Office Update
web site to get the appropriate updates.
Apple Mac OS X users should obtain updates from the Mactopia web
site.
Description
Vulnerabilities in Microsoft Windows and Microsoft Office may allow
an attacker to access your computer, install and run malicious
software on your computer, or cause it to crash.
For more technical information, see US-CERT Technical Alert
TA06-192A.
References
* Microsoft Security Bulletin Summary for July 2006 -
<http://www.microsoft.com/technet/security/bulletin/ms06-jul.mspx>
* Technical Cyber Security Alert TA06-167A -
<http://www.us-cert.gov/cas/techalerts/TA06-167A.html>
* US-CERT Vulnerability Notes for Microsoft Updates for July 2006 -
<http://www.kb.cert.org/vuls/byid?searchview&query=ms06-jul>
* US-CERT Vulnerability Note VU#395588 -
<http://www.kb.cert.org/vuls/id/395588>
* US-CERT Vulnerability Note VU#189140 -
<http://www.kb.cert.org/vuls/id/189140>
* US-CERT Vulnerability Note VU#257164 -
<http://www.kb.cert.org/vuls/id/257164>
* US-CERT Vulnerability Note VU#802324 -
<http://www.kb.cert.org/vuls/id/802324>
* US-CERT Vulnerability Note VU#580036 -
<http://www.kb.cert.org/vuls/id/580036>
* US-CERT Vulnerability Note VU#609868 -
<http://www.kb.cert.org/vuls/id/609868>
* US-CERT Vulnerability Note VU#409316 -
<http://www.kb.cert.org/vuls/id/409316>
* US-CERT Vulnerability Note VU#459388 -
<http://www.kb.cert.org/vuls/id/459388>
* US-CERT Vulnerability Note VU#668564 -
<http://www.kb.cert.org/vuls/id/668564>
* CVE-2006-0026 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0026>
* CVE-2006-1314 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1314>
* CVE-2006-2372 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2372>
* CVE-2006-3059 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3059>
* CVE-2006-1316 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1316>
* CVE-2006-1540 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1540>
* CVE-2006-2389 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2389>
* CVE-2006-0033 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0033>
* CVE-2006-0007 -
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0007>
* Microsoft Update - <https://update.microsoft.com/microsoftupdate/>
* Microsoft Office Update - <http://officeupdate.microsoft.com/>
* Mactopia - <http://www.microsoft.com/mac/>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA06-192A.html>
____________________________________________________________________
Feedback can be directed to US-CERT. Please send email to
<cert@cert.org> with "SA06-192A Feedback VU#802324" in the subject.
____________________________________________________________________
Mailing list information:
<http://www.us-cert.gov/cas/>
____________________________________________________________________
Produced 2006 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
July 11, 2006: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRLQsv30pj593lg50AQK5TggAzhaDkgicB/UiHt1/euyZZpJ1EDzigYdo
XMsMhXfddzd/U6/isF7p/k6TGyMgTADAA2X26qpL06jmqljr5ajNU5UUMv53T6pk
WYU9nB4JzBueZKughIVAJTzMmHvqmDVhUdBYkCPL1CUziziJN3v1mA8CviOSuP9m
WRCu3oGNQWIDx0s8C7Cm+LpyeKx4G8ry6F5Lw0WTUhPKctuD2Ihh5NbvuyMwEOEE
vTBkePh8mHUo+K5ceCz+QNeoL4G6/Ps4b0uIg8St9Pth845eOt3LobrWJScbxwtB
vPfgkdlVyyVKM1VHDWjf+lF/CF7vJ8DOs2XoVcO6BqdNG0gtqaN+JQ==
=CX7G
-----END PGP SIGNATURE-----
