-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA07-009A
Microsoft Updates for Multiple Vulnerabilities
Original release date: January 9, 2007
Last revised: --
Source: US-CERT
Systems Affected
* Microsoft Windows
* Microsoft Internet Explorer
* Microsoft Outlook
* Microsoft Excel for Windows and Mac OS X
Overview
Vulnerabilities in Microsoft Windows, Internet Explorer, Outlook,
and Excel could allow an attacker to gain control of your computer.
Solution
Apply Update
Microsoft has provided updates to remedy these vulnerabilities. To
obtain these updates, visit the Microsoft Update web site. We also
recommend enabling Automatic Updates.
Users of Office for Mac OS X should obtain updates from the
Mactopia website.
Description
Vulnerabilities in Microsoft Windows, Internet Explorer, Outlook,
and Excel may allow an attacker to access your computer, install
and run malicious software on your computer, or cause it to crash.
An attacker could exploit these vulnerabilities by using specially
crafted network traffic, or by convincing you to view a specially
crafted Office document.
For more technical information, see US-CERT Technical Alert
TA07-009A.
References
* Technical Alert TA07-009A -
<http://www.us-cert.gov/cas/techalerts/TA07-009A.html>
* Vulnerability Notes for Microsoft January 2007 updates -
<http://www.kb.cert.org/vuls/byid?searchview&query=ms07-jan>
* Securing Your Web Browser -
<http://www.us-cert.gov/reading_room/securing_browser/>
* Using Caution with Email Attachments -
<http://www.us-cert.gov/cas/tips/ST04-010.html>
* Microsoft Security Essentials -
<http://www.microsoft.com/protect/>
* Microsoft security updates for January 2007 -
<http://www.microsoft.com/athome/security/update/bulletins/200701.mspx>
* Microsoft Update - <https://update.microsoft.com/microsoftupdate/>
* Microsoft Office Update - <http://officeupdate.microsoft.com/>
* Mactopia - <http://www.microsoft.com/mac/>
* Microsoft Automatic Updates -
<http://www.microsoft.com/athome/security/update/msupdate_keep_current.mspx#EZB>
--------------------------------------------------------------------
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA07-009A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA07-009A Feedback VU#749964" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
January 09, 2007: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRaPzvuxOF3G+ig+rAQLhJQgAo8VKs3wRPnDZPzFmpm3XblJDewZpK8lb
4m/ueD0yEhlpHvp1tdSuJoj7wx/dzoD+ZAnrkIy0qYYbRNE+EmaVzynSWqyls/5P
4/dlif7PHCZnCMMgXUhygUgfbf1+a0qg3SpzngzD8PNmKLVfhlvJ0gEtK3FLf7T/
hQcJAJtIDe3foWY55rMhQyV3gygsZWWM7lAS0itl3WUoCnxTzPowrade1Ctvu/Ge
ZeWijNGiL41NUDnw92v7ZPjsgARAbx7D3qIuO2wR+YE8OCFc+31l6aIUmsnlRLBa
ENC2o9G3fk9z/xKm9JoXDgSlcmpiyDkpNSqbj8Cp3y/HyhYysF43ZQ==
=Wom8
-----END PGP SIGNATURE-----
