-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA07-282A
Microsoft Updates for Multiple Vulnerabilities
Original release date: October, 2007
Last revised: --
Source: US-CERT
Systems Affected
* Microsoft Windows
* Microsoft Internet Explorer
* Microsoft Outlook Express and Windows Mail
* Microsoft Office
* Microsoft Office for Mac
Overview
Vulnerabilities in Microsoft Windows, Internet Explorer, Microsoft
Outlook Express and Windows Mail, Office, and Office for Mac could
allow an attacker to gain control of your computer.
Solution
Install updates
Microsoft has released updates to remedy vulnerabilities in Microsoft
Windows, Internet Explorer, Microsoft Outlook Express and Windows
Mail, Office, and Office for Mac.
Updates for Microsoft Windows and Microsoft Office XP and later are
available on the Microsoft Update site. Microsoft Office 2000 updates
are available on the Microsoft Office Update site. We also recommend
enabling Automatic Updates.
Apple Mac OS X users should obtain updates from the Mactopia web site.
Description
Vulnerabilities in Microsoft Windows, Internet Explorer, Office, and
Office for Mac may allow an attacker to access your computer, install
and run malicious software on your computer, or cause it to crash.
More technical information is available in US-CERT Technical Cyber
Security Alert TA07-282A.
References
* US-CERT Technical Cyber Security Alert TA07-282A -
<http://www.us-cert.gov/cas/techalerts/TA07-282A.html>
* Microsoft security updates for October 2007 -
<http://www.microsoft.com/protect/computer/updates/bulletins/200708.mspx>
* US-CERT Vulnerability Notes for Microsoft October 2007 updates -
<http://www.kb.cert.org/vuls/byid?searchview&query=ms07-oct>
* Microsoft Security at Home - <http://www.microsoft.com/protect/>
* Microsoft Update - <https://update.microsoft.com/microsoftupdate/>
* Microsoft Automatic Updates -
<http://www.microsoft.com/athome/security/update/msupdate_keep_current.mspx#EZB>
* Mactopia - <http://www.microsoft.com/mac>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/techalerts/SA07-282A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA07-282A Feedback VU#569041" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
October 9, 2007: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRwvVefRFkHkM87XOAQLv2Qf+JhbJWNiYZ4PnECT+ahRjN+ga4+zf8vNZ
9MqDu5wn/40jRF04q3YTx4mCZDobxQvtjxLyQoQphZGTb64FZ4VbPF0k58mlqcEI
MjMnXOSp8CgM1liG4/PlDVmPo6YrvplBrKKnAmaKeMnU3Olizk+3EA6YJaUfhATv
PRCqHXVJBT0i/H8RAC0Ywyc14y9Kcq5qjSb4mbNpsmMy/FwpsuHaDePLBrd77CMm
CcSqbSegObkRFFlryNdM8h5tHzgtL6paogALKqxMajrGhkRfBzgLsk1Bl6dg9Bry
TZH15QbNRlF7p8jUuloAUgZXF1WZo3Xn7Xx2hPdA99xeKTDxAoCPVA==
=GfDQ
-----END PGP SIGNATURE-----
