Advisories

CERT-In Advisory CIAD-2006-0043

Multiple Vulnerabilities in Microsoft Windows, Microsoft Internet Explorer and Microsoft XML Core Services

Original Issue Date: November 15, 2006

Severity Rating: High

Systems Affected

Microsoft Windows Operating Systems
Microsoft Internet Explorer 5.01
Microsoft Internet Explorer 6
Microsoft XML Core Services

Overview

Multiple vulnerabilities have been reported in various components of Microsoft Windows, Microsoft Internet Explorer and Microsoft XML Core Services. This advisory describes these vulnerabilities addressed by the Microsoft Security Bulletins of November 2006.

Description

The vulnerability notes released by CERT-In with reference to Microsoft Security Bulletins are given below:

Microsoft Security Bulletin	Severity	CERT-In Vulnerability Notes
MS06-066:Vulnerabilities in Client Service for NetWare Could Allow Remote Code Execution	Low	CIVN-2006-0114 Multiple Vulnerabilities in Client Service for NetWare
MS06-068:Vulnerability in Microsoft Agent Could Allow Remote Code Execution	High	CIVN-2006-0116 Microsoft Agent Memory Corruption Vulnerability
MS06-069:Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution	High	CIVN-2006-0030 Multiple Vulnerabilities in Internet Explorer
MS06-070:Vulnerability in Workstation Service Could Allow Remote Code Execution	High	CIVN-2006-0117 Microsoft Windows workstation Service Memory Corruption Vulnerability
MS06-071:Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution	High	CIVN-2006-0112 Microsoft XML Core Services XMLHTTP ActiveX Control Code Execution Vulnerability

Solution

Apply appropriate patches as mentioned in Microsoft Security Bulletin November 2006
http://www.microsoft.com/technet/security/bulletin/ms06-nov.mspx

Vendor Information

Microsoft Corporation
http://www.microsoft.com/technet/security/bulletin/ms06-nov.mspx

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-24368572

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India