検索:
ホーム   »     »   MS Additional Updates Released

MS Additional Updates Released

  • 投稿日:2006年1月11日
  • 脅威カテゴリ:未分類
  • 執筆:ウイルス解析担当者
0

Microsoft released additional two security bulletins for this month. These are tagged critical since remote code execution is possible when the vulnerability is successfully exploited. More details can be found at Microsoft’s pages. (click on each link below)



  • MS06-002 – Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution

“A remote code execution vulnerability exists in Windows because of the way that it handles malformed embedded Web fonts. An attacker could exploit the vulnerability by constructing a malicious embedded Web font that could potentially allow remote code execution if a user visited a malicious Web site or viewed a specially crafted e-mail message. An attacker who successfully exploited this vulnerability could take complete control of an affected system.”



  • MS06-003 – Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution

“A remote code execution vulnerability exists in Microsoft Outlook and Microsoft Exchange Server because of the way that it decodes the Transport Neutral Encapsulation Format (TNEF) MIME attachment.”


“An attacker could exploit the vulnerability by constructing a specially crafted TNEF message that could potentially allow remote code execution when a user opens or previews a malicious e-mail message or when the Microsoft Exchange Server Information Store processes the specially crafted message.”


“An attacker who successfully exploited this vulnerability could take complete control of an affected system.”


Users are encouraged to patch their machines immediately to avoid possible attacks from malicious users using the said vulnerabilities. You can get MS patches by visiting Microsoft Update and Office Update. (Note: for Firefox browser users, Internet Explorer must be used when going to Microsoft update) =)


No related posts.



  • 個人のお客さま向けオンラインショップ
  • |
  • 法人のお客さま向け直営ストア
  • |
  • 販売パートナー検索
  • Asia Pacific Region (APAC): Australia / New Zealand, 中国, 日本, 대한민국, 台灣
  • Latin America Region (LAR): Brasil, México
  • North America Region (NABU): United States, Canada
  • Europe, Middle East, & Africa Region (EMEA): France, Deutschland / Österreich / Schweiz, Italia, Россия, España, United Kingdom / Ireland
  • 電子公告
  • ご利用条件
  • プライバシーポリシー
  • Copyright © 2021 Trend Micro Incorporated. All rights reserved.