NICK_ADSL_UK
Senior Member
   

Gender: 
Posts: 316
|
 |
Microsoft Security Bulletin Summary for July, 2006
« on: Jul 11th, 2006, 6:04pm » |
Quote Modify
|
Microsoft Security Bulletin Summary for July, 2006 Published: July 11, 2006 | Updated: July 11, 2006 Bulletin Summary: http://www.microsoft.com/technet/security/Bulletin/ms06-Jul.mspx Critical (5) Bulletin Identifier Microsoft Security Bulletin MS06-035 Bulletin Title Vulnerability in Server Service Could Allow Remote Code Execution (917159) Executive Summary This update resolves two vulnerabilities in the Server service, the most serious of which could allow remote code execution http://www.microsoft.com/technet/security/Bulletin/ms06-035.mspx Bulletin Identifier Microsoft Security Bulletin MS06-036 Bulletin Title Vulnerability in DHCP Client Service Could Allow Remote Code Execution (91438 Executive Summary This update resolves a vulnerability in the DHCP Client service that could allow remote code execution http://www.microsoft.com/technet/security/Bulletin/ms06-036.mspx Bulletin Identifier Microsoft Security Bulletin MS06-037 Bulletin Title Vulnerability in Microsoft Excel Could Allow Remote Code Execution (917285) Executive Summary This update resolves several vulnerabilities in Excel, the most serious of which could allow remote code execution. http://www.microsoft.com/technet/security/Bulletin/ms06-037.mspx Bulletin Identifier Microsoft Security Bulletin MS06-038 Bulletin Title Vulnerability in Microsoft Office Could Allow Remote Code Execution (915384) Executive Summary This update resolves two vulnerabilities in Office, the most serious of which could allow remote code execution. http://www.microsoft.com/technet/security/Bulletin/ms06-038.mspx Bulletin Identifier Microsoft Security Bulletin MS06-039 Bulletin Title Vulnerability in Microsoft Office Could Allow Remote Code Execution (915384) Executive Summary This update resolves two vulnerabilities in Office, the most serious of which could allow remote code execution. http://www.microsoft.com/technet/security/Bulletin/ms06-038.mspx Important (1) Bulletin Identifier Microsoft Security Bulletin MS06-033 Bulletin Title Vulnerability in ASP.NET Could Allow Information Disclosure (917283) Executive Summary This vulnerability could allow an attacker to bypass ASP.Net security and gain unauthorized access to objects in the Application folder explicitly by name. Note that this vulnerability would not allow an attacker to execute code or to elevate their user rights directly, but it could be used to produce useful information that could be used to try to further compromise the affected system. http://www.microsoft.com/technet/security/Bulletin/ms06-033.mspx Moderate Bulletins: Bulletin Identifier Microsoft Security Bulletin MS06-034 Bulletin Title Vulnerability in Microsoft Internet Information Services using Active Server Pages Could Allow Remote Code Execution (917537) Executive Summary This vulnerability could allow an attacker to take complete control of an affected system. Note that the attacker must have valid logon credentials, but if a server has been purposely configured to allow users, either anonymous or authenticated, to upload web content such as .ASP pages to web sites, the server could be exploited by this vulnerability. http://www.microsoft.com/technet/security/Bulletin/ms06-034.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety 1-866-727-2338 International customers should contact their local subsidiary.
|