-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA06-283A
Microsoft Updates for Vulnerabilities in Windows, Office, and Internet
Explorer
Original release date: October 10, 2006
Last revised: --
Source: US-CERT
Systems Affected
* Microsoft Windows
* Microsoft Office
* Microsoft Internet Explorer
Overview
Vulnerabilities in Microsoft Windows, Internet Explorer, and Office
could allow an attacker to gain control of your computer.
Solution
Apply Update
Microsoft has provided updates to remedy these vulnerabilities. To
obtain these updates, visit the Microsoft Update web site. US-CERT
also recommends enabling Automatic Updates.
Microsoft Office 2000 users must visit the Microsoft Office Update
web site to get the appropriate updates.
Apple Mac OS X users should obtain updates from the Mactopia web
site.
Do not open untrusted documents
Do not open unfamiliar or unexpected Office documents, including
those received as email attachments or hosted on a web site. For
more information, please see Using Caution with Email Attachments.
Description
Vulnerabilities in Microsoft Windows, Internet Explorer, and Office
may allow an attacker to access your computer, install and run
malicious software on your computer, or cause it to crash. An
attacker could exploit these vulnerabilities by using specially
crafted network traffic, by convincing you to click on a specially
crafted URL, or by convincing you to open a specially crafted
Office document. An Office document could be attached to an email
message, hosted on a web site, or included in another Office
document.
For more technical information, see US-CERT Technical Alert
TA06-283A.
References
* US-CERT Technical Alert TA06-283A -
<http://www.us-cert.gov/cas/techalerts/TA06-283A.html>
* US-CERT Vulnerability Notes for Microsoft October 2006 updates -
<http://www.kb.cert.org/vuls/byid?searchview&query=ms06-oct>
* Securing Your Web Browser -
<http://www.us-cert.gov/reading_room/securing_browser/>
* Using Caution with Email Attachments -
<http://www.us-cert.gov/cas/tips/ST04-010.html>
* Microsoft Security Essentials -
<http://www.microsoft.com/protect/>
* Microsoft security updates for October 2006 -
<http://www.microsoft.com/athome/security/update/bulletins/200610.mspx>
* Microsoft Update -
<https://update.microsoft.com/microsoftupdate/>
* Microsoft Office Update - <http://officeupdate.microsoft.com/>
* Mactopia - <http://www.microsoft.com/mac/>
* Microsoft Automatic Updates -
<http://www.microsoft.com/athome/security/update/msupdate_keep_current.mspx#EZB>
_________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA06-283A.html>
_________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA06-283A Feedback VU#703936" in the
subject.
_________________________________________________________________
Produced 2006 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
_________________________________________________________________
Revision History
October 10, 2006: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRSv4T+xOF3G+ig+rAQIjdgf9FgZs3RHuAmhL9G5XMAMrNokTHN0Juv20
QQWIooSuP06pnpdQl9o6fpdP3bpF2lf8FDYPtZMD7mDt1lVMdBxXybMrVCsxxpis
+kRlOuUWdlzjpUm/xwtnhVMliv/KsberAMmObemh89B0nFaP5T2FMqbZjSLfwjIN
HF40wD+5eAMxjF86q6fCnS2/Pscwm8/yYdcUWKfxIdSHHha/YaWQE3ElmNtKzC0r
Rd/cNPb95HNs0kZED3aDJSEt59QGNVIua+tz+IdgbqHBrBPlwFRulx4MZXaUiIXd
pTvtrz71OO5a0OYyEB7GNTQHDeoMMVQ4Lq9ng8TL/xBmsv5LddG04Q==
=QV2f
-----END PGP SIGNATURE-----
