Advisories

CERT-In Advisory CIAD-2005-0019

Vulnerabilities in Microsoft Windows Components and Internet Explorer

Original Issue Date: August 10, 2005

Severity Rating: High

Systems Affected

Microsoft Windows components and Internet Explorer

Overview

Multiple vulnerabilities have been reported in the Microsoft Windows components and Internet Explorer. This advisory describes these vulnerabilities addressed by the Microsoft Security Bulletins of August 2005.

Description

The vulnerability notes released by CERT-In with reference to Microsoft Security Bulletins are given below:

Microsoft Security Bulletin	Severity	CERT-In Vulnerability Notes
MS05-038:Cumulative Security Update for Internet Explorer	High	CIVN-2005-0072 Vulnerabilities in JPEG Image Rendering, Web Folder Behaviors and COM Object Instantiation components of Microsoft Internet Explorer
MS05-039:Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege	High	CIVN-2005-0073 Microsoft Plug and Play service Buffer Overflow Vulnerability
MS05-043:Vulnerability in Print Spooler Service Could Allow Remote Code Execution	High	CIVN-2005-0074 Microsoft Print Spooler service buffer overflow vulnerability
MS05-040:Vulnerability in Telephony Service Could Allow Remote Code Execution	Medium	CIVN-2005-0075 Vulnerability in Telephony Service Could Allow Remote Code Execution
MS05-041 :Vulnerability in Remote Desktop Protocol Could Allow Denial of Service	Medium	CIVN-2005-0065 Vulnerability in Remote Desktop Protocol RDP Could Lead to Denial of Service
MS05-042:Vulnerabilities in Kerberos Could Allow Denial of Service, Information Disclosure, and Spoofing	Medium	CIVN-2005-0076 Vulnerabilities in Kerberos Could Allow Denial of Service, Information Disclosure and Spoofing

Solution

Apply appropriate patches as mentioned in Microsoft Security Bulletin August 2005
http://www.microsoft.com/technet/security/bulletin/ms05-aug.mspx

Vendor Information

Microsoft Corporation
http://www.microsoft.com/technet/security/bulletin/ms05-aug.mspx

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-24368572

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India