-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA07-044A
Microsoft Updates for Multiple Vulnerabilities
Original release date: February 13, 2007
Last revised: --
Source: US-CERT
Systems Affected
* Microsoft Windows
* Microsoft Internet Explorer
* Microsoft Office
* Microsoft Works
* Microsoft Malware Protection Engine
* Microsoft Step-by-Step Interactive Training
Overview
Vulnerabilities in Microsoft Windows, Internet Explorer, Office,
Works, Malware Protection Engine, and Step-by-Step Interactive
Training could allow an attacker to gain control of your computer.
Solution
Apply Update
Microsoft has provided updates to remedy these vulnerabilities. To
obtain these updates, visit the Microsoft Update web site. We also
recommend enabling Automatic Updates.
Users of Office for Mac OS X should obtain updates from the
Mactopia website.
Description
Vulnerabilities in Microsoft Windows, Internet Explorer, Office,
Works, Malware Protection Engine, and Step-by-Step Interactive
Training may allow an attacker to access your computer, install and
run malicious software on your computer, or cause it to crash. An
attacker could exploit these vulnerabilities by using specially
crafted network traffic, or by convincing you to view a specially
crafted Office document.
For more technical information, see US-CERT Technical Alert
TA07-044A.
References
* Technical Alert TA07-044A -
<http://www.us-cert.gov/cas/techalerts/TA07-044A.html>
* Vulnerability Notes for Microsoft February 2007 updates -
<http://www.kb.cert.org/vuls/byid?searchview&query=ms07-feb>
* Securing Your Web Browser -
<http://www.us-cert.gov/reading_room/securing_browser/>
* Using Caution with Email Attachments -
<http://www.us-cert.gov/cas/tips/ST04-010.html>
* Microsoft Security Essentials -
<http://www.microsoft.com/protect/>
* Microsoft security updates for February 2007 -
<http://www.microsoft.com/athome/security/update/bulletins/200702.mspx>
* Microsoft Update - <https://update.microsoft.com/microsoftupdate/>
* Microsoft Office Update - <http://officeupdate.microsoft.com/>
* Mactopia - <http://www.microsoft.com/mac/>
* Microsoft Automatic Updates -
<http://www.microsoft.com/athome/security/update/msupdate_keep_current.mspx#EZB>
- --------------------------------------------------------------------
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA07-044A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA07-044A Feedback VU#753924" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
February 13, 2007: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRdIUzuxOF3G+ig+rAQJPYQf/Qm7ygVddlVVLUTpWbO0U/xYX8ptIOuEQ
qom1gHYxoPie2fGj3FVgrn1VDZZztlnrTg23r01fcq3Im7IQ1vj4jev4nNSyGfnb
HOlsYQZXzxSg2ukv9N4Ds2lXxO00B1MWPUZ2I7fi6rLFKAMf+Kse/noWKKiVkDyH
IxQMrJPMlrH25//ilFZIYIauMIFq4T9RBIj9RixgXh3CZjbTt7i41FuXFzVnhwI/
tckeppskCmc1kqpIdC3DMUMIDGFTY9DRBzRUixo7fsUzDiYNxQlZ5DjSrHK7goRf
baW3iKA5nSyBraOheiEfpuzb4uuXbM3aWX0CqgLJqK1EA3yejSHpYg==
=2TcP
-----END PGP SIGNATURE-----
