The June updates required over 20MB of downloading to accomplish all the Windows, IE, and Office patches. There are several critical updates including a patch to Word where a zero day exploit had surfaced in the past couple of weeks.
Microsoft Security Bulletin Summary for June, 2006
http://www.microsoft.com/technet/security/...n/ms06-jun.mspx
Page 1 of 1
Microsoft Security Bulletins - June, 2006 Windows, IE, and Office security updates
#2
Posted 13 June 2006 - 04:56 PM
8 Critical:
Cumulative Security Update for IE (KB916281)
Security Update for PowerPoint 2003 (KB916518)
Security Update for Word (KB917334)
Secuirty Update for Media Player10 (KB917734)
Security Update for XP (KB911280) - Routing and Remote Access
Security Update for XP (KB918439) - ART Image Rendering
Security Update for XP (KB917344) - Microsoft JScript
Windows Malicious Software Removal Tool - June 2006 (KB890830)
3 Important Bulletins:
Vulnerability in Microsoft Exchange Server Running Outlook Web Access Could Allow Script Injection (912442) for Microsoft Exchange 2000 Server Pack 1-3 only
Vulnerability in Server Message Block Could Allow Elevation of Privilege (914389)
Vulnerability in TCP/IP Could Allow Remote Code Execution (917953)
1 Moderate Bulletin:
Vulnerability in RPC Mutual Authentication Could Allow Spoofing (917736) for Microsoft Windows 2000 Service Pack 4 only
Cumulative Security Update for IE (KB916281)
Security Update for PowerPoint 2003 (KB916518)
Security Update for Word (KB917334)
Secuirty Update for Media Player10 (KB917734)
Security Update for XP (KB911280) - Routing and Remote Access
Security Update for XP (KB918439) - ART Image Rendering
Security Update for XP (KB917344) - Microsoft JScript
Windows Malicious Software Removal Tool - June 2006 (KB890830)
3 Important Bulletins:
Vulnerability in Microsoft Exchange Server Running Outlook Web Access Could Allow Script Injection (912442) for Microsoft Exchange 2000 Server Pack 1-3 only
Vulnerability in Server Message Block Could Allow Elevation of Privilege (914389)
Vulnerability in TCP/IP Could Allow Remote Code Execution (917953)
1 Moderate Bulletin:
Vulnerability in RPC Mutual Authentication Could Allow Spoofing (917736) for Microsoft Windows 2000 Service Pack 4 only
This post has been edited by quietman7: 14 June 2006 - 06:58 AM
Microsoft MVP - Consumer Security 2007-2012 
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

Member of UNITE, Unified Network of Instructors and Trusted Eliminators
#3
Posted 14 June 2006 - 02:38 PM
Quote
After yesterday's patchday, we start to receive a number of reports about newly released exploits for vulnerabilities announced on Tuesday. Here a quick lists of what we have seen so far:
MS06-024: Windows Media Player -- Exploit released by penetration testing vendor to customers.
MS06-025: RRAS -- Exploit released by penetration testing vendor to customers.
MS06-027: Word remote code execution -- Exploit available before release of patch.
MS06-030: SMB Priviledge Escalation -- Two exploits released to the public.
MS06-032: IP Source Routing Exploit -- DoS exploits released privately (trivial exploit)
MS06-024: Windows Media Player -- Exploit released by penetration testing vendor to customers.
MS06-025: RRAS -- Exploit released by penetration testing vendor to customers.
MS06-027: Word remote code execution -- Exploit available before release of patch.
MS06-030: SMB Priviledge Escalation -- Two exploits released to the public.
MS06-032: IP Source Routing Exploit -- DoS exploits released privately (trivial exploit)
All users should patch their systems expediently, as some of these exploits could be crafted into viruses
Microsoft June Security Updates - New Exploits Surfacing
http://www.incidents.org/diary.php?storyid=1415
Share this topic:
Page 1 of 1

Help



Back to top









