BleepingComputer.com: Microsoft Security Bulletins - June, 2006

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Microsoft Security Bulletins - June, 2006 Windows, IE, and Office security updates

#1 User is offline   harrywaldron 

  • Security Reporter
  • PipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 509
  • Joined: 10-April 04
  • Gender:Male
  • Location:Roanoke, Virginia

  Posted 13 June 2006 - 12:55 PM

The June updates required over 20MB of downloading to accomplish all the Windows, IE, and Office patches. There are several critical updates including a patch to Word where a zero day exploit had surfaced in the past couple of weeks.

Microsoft Security Bulletin Summary for June, 2006
http://www.microsoft.com/technet/security/...n/ms06-jun.mspx

#2 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,518
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 13 June 2006 - 04:56 PM

8 Critical:
Cumulative Security Update for IE (KB916281)
Security Update for PowerPoint 2003 (KB916518)
Security Update for Word (KB917334)
Secuirty Update for Media Player10 (KB917734)
Security Update for XP (KB911280) - Routing and Remote Access
Security Update for XP (KB918439) - ART Image Rendering
Security Update for XP (KB917344) - Microsoft JScript
Windows Malicious Software Removal Tool - June 2006 (KB890830)

3 Important Bulletins:
Vulnerability in Microsoft Exchange Server Running Outlook Web Access Could Allow Script Injection (912442) for Microsoft Exchange 2000 Server Pack 1-3 only
Vulnerability in Server Message Block Could Allow Elevation of Privilege (914389)
Vulnerability in TCP/IP Could Allow Remote Code Execution (917953)

1 Moderate Bulletin:
Vulnerability in RPC Mutual Authentication Could Allow Spoofing (917736) for Microsoft Windows 2000 Service Pack 4 only

This post has been edited by quietman7: 14 June 2006 - 06:58 AM

Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#3 User is offline   harrywaldron 

  • Security Reporter
  • PipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 509
  • Joined: 10-April 04
  • Gender:Male
  • Location:Roanoke, Virginia

  Posted 14 June 2006 - 02:38 PM

Quote

After yesterday's patchday, we start to receive a number of reports about newly released exploits for vulnerabilities announced on Tuesday. Here a quick lists of what we have seen so far:

MS06-024: Windows Media Player -- Exploit released by penetration testing vendor to customers.

MS06-025: RRAS -- Exploit released by penetration testing vendor to customers.

MS06-027: Word remote code execution -- Exploit available before release of patch.

MS06-030: SMB Priviledge Escalation -- Two exploits released to the public.

MS06-032: IP Source Routing Exploit -- DoS exploits released privately (trivial exploit)


All users should patch their systems expediently, as some of these exploits could be crafted into viruses

Microsoft June Security Updates - New Exploits Surfacing
http://www.incidents.org/diary.php?storyid=1415

#4 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,518
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 15 June 2006 - 01:15 PM

Related: Exploits Out For 1 In 3 Microsoft Bugs
Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users