Advisories

CERT-In Advisory CIAD-2007-0052

Multiple Vulnerabilities in Microsoft Products

Original Issue Date: October 10, 2007

Severity Rating: High

Systems Affected

Microsoft Windows Kodak Image Viewer
Network News Transfer Protocol
Microsoft IE
RPC Authentication
Microsoft Windows Share Point Service 3.0 and Share point server 2007
Microsoft Word

Overview

Multiple vulnerabilities have been reported in various components of Microsoft Windows, Microsoft Windows Kodak Image Viewer, Network News Transfer Protocol, Microsoft IE, RPC Authentication, Microsoft Windows Share Point Service 3.0 and Share point server 2007, Microsoft Word .

Description

The vulnerability notes released by CERT-In with reference to Microsoft Security Bulletins are given below:

Microsoft Security Bulletin	Severity	CERT-In Vulnerability Notes
MS07-055:Vulnerability in Kodak Image Viewer Could Allow Remote Code Execution	Medium	CIVN-2007-0129 Microsoft Windows Kodak Image Viewer Remote Code Execution Vulnerability
MS07-056:Security Update for Outlook Express and Windows Mail	High	CIVN-2007-0130 Network News Transfer Protocol Memory Corruption Vulnerability
MS07-057:Cumulative Security Update for Internet Explorer	High	CIVN-2007-0131 Multiple Vulnerabilities in Microsoft IE could Allow Remote Code Execution
MS07-058:Vulnerability in RPC Could Allow Denial of Service	Medium	CIVN-2007-0132 Microsoft Windows RPC Authentication Denial of Service Vulnerability
MS07-059:Vulnerability in Windows SharePoint Services 3.0 and Office SharePoint Server 2007	Medium	CIVN-2007-0133 Cross-site scripting vulnerability in Microsoft Windows Share Point Service 3.0 and Share point server 2007
MS07-060:Vulnerability in Microsoft Word Could Allow Remote Code Execution	High	CIVN-2007-0134 Microsoft Word Memory Corruption Vulnerability

Solution

Apply appropriate patches as mentioned in Microsoft Security Bulletin October 2007
http://www.microsoft.com/technet/security/bulletin/ms07-oct.mspx

Vendor Information

Microsoft Corporation
http://www.microsoft.com/technet/security/bulletin/ms07-oct.mspx

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-24368572

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India