Advisories

CERT-In Advisory CIAD-2005-0015

Vulnerabilities in Microsoft Word, Color Management Module and Internet Explorer

Original Issue Date: June 28, 2005

Severity Rating: High

Systems Affected

Microsoft Windows components, MS Word and MS Internet Explorer

Overview

Three vulnerabilities have been reported in the Microsoft Windows components such as MS Word, Color Management Module and JView Profiler of Internet Explorer. This advisory describes these vulnerabilities addressed by the Microsoft Security Bulletins of July 2005.

Description

The vulnerability notes released by CERT-In with reference to Microsoft Security Bulletins are given below:

Microsoft Security Bulletin	Severity	CERT-In Vulnerability Notes
MS05-035:Vulnerability in Microsoft Word Could Allow Remote Code Execution	High	CIVN-2005-0063 Vulnerability in Microsoft Word Could Allow Remote Code Execution
MS05-036:Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution	High	CIVN-2005-0064 Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution
MS05-037:Vulnerability in JView Profiler Could Allow Remote Code Execution	High	CIVN-2005-0060 Microsoft Internet Explorer javaprxy.dll COM Object Vulnerability

Solution

Apply appropriate patches as mentioned in Microsoft Security Bulletin July 2005
http://www.microsoft.com/security/bulletins/default.mspx

Vendor Information

Microsoft Corporation
http://www.microsoft.com/security/bulletins/default.mspx

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-24368572

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India