-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA07-254A
Microsoft Updates for Multiple Vulnerabilities
Original release date: September 11, 2007
Last revised: --
Source: US-CERT
Systems Affected
* Microsoft Windows
* Microsoft MSN Messenger
Overview
Vulnerabilities in Microsoft Windows Windows and MSN Messenger could
allow an attacker to gain control of your computer.
Solution
Install updates
Microsoft has released updates to remedy vulnerabilities in Microsoft
Windows and MSN Messenger.
Updates for Microsoft Windows are available on the Microsoft Update
site. We also recommend enabling Automatic Updates.
Description
Vulnerabilities in Microsoft Windows and MSN Messenger may allow an
attacker to access your computer, install and run malicious software
on your computer, or cause it to crash.
More technical information is available in US-CERT Technical Cyber
Security Alert TA07-254A.
References
* US-CERT Technical Cyber Security Alert TA07-254A -
<http://www.us-cert.gov/cas/techalerts/TA07-254A.html>
* Vulnerability Notes for Microsoft September 2007 updates -
<http://www.kb.cert.org/vuls/byid?searchview&query=ms07-Sep>
* Microsoft security updates for September 2007 -
<http://www.microsoft.com/protect/computer/updates/bulletins/200709.mspx>
* Microsoft Security at Home - <http://www.microsoft.com/protect/>
* Microsoft Update - <https://update.microsoft.com/microsoftupdate/>
* Microsoft Automatic Updates -
<http://www.microsoft.com/athome/security/update/msupdate_keep_current.mspx#EZB>
* Securing Your Web Browser -
<http://www.cert.org/tech_tips/securing_browser/>
_________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA07-254A.html>
_________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA07-254A Feedback VU#716872" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
September 11, 2007: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRubzVfRFkHkM87XOAQKbLAf/QvjnbMxkaEgo0CphKgMTxSUyk+hnm424
qTCvi5OFL+Ne+IhFO8O+N7nOINQFi3pTi25tPjAMFRrpUDljvi82bXnaz+K7Xw9M
QboVKyzsMAAiXSGa3YfySgMtaKqstrNnLqj5TN1gFoAe7NrlYPDD2HCfGNT4MM2+
+FRq0A+SUdKxQALzhMHDx/tvd+zyZB0DvaJ1whkiwtK7TbMLm5JzMpuH0m5c7dF9
/DdVry2XJsA2D3U2j5Ba5x09GzP9aVWZJd6wIFUxX0zJAor2IpV/T4eVF0HMigmK
gzMlZtSAqiOrP+CmSHNDY9UHHwb/0IKUjoZ+ChANjiu2GuTicCXGXg==
=eT+c
-----END PGP SIGNATURE-----
