JaBbA's Hut

I read in the last few days that Microsoft would release patches today for at least one Critical security flaw.

Turns out it's THREE.

Vulnerability in DirectShow Could Allow Remote Code Execution (904706): Executive Summary

A vulnerability exists in DirectShow that could allow an attacker to take complete control of the affected system.

Maximum Severity Rating
Critical

Impact of Vulnerability
Remote Code Execution

Affected Software
Windows, DirectX. For more information, see the Affected Software and Download Locations section.
Bulletin Identifier Microsoft Security Bulletin MS05-051
Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution (902400): Executive Summary
Vulnerabilities exist in MSDC and COM+ that could allow an attacker to take complete control of the affected system.

Maximum Severity Rating
Critical

Impact of Vulnerability
Remote Code Execution

Affected Software
Windows. For more information, see the Affected Software and Download Locations section.
Bulletin Identifier Microsoft Security Bulletin MS05-052
Cumulative Security Update for Internet Explorer (896688): Executive Summary
A vulnerability exists in Internet Explorer that could allow an attacker to take complete control of an affected system.

Maximum Severity Rating
Critical

Impact of Vulnerability
Remote Code Execution

Affected Software
Windows, Internet Explorer. For more information, see the Affected Software and Download Locations section.

JaBbA says Update Now.

Posted by JaBbA in Security at 16:12 | Comment (1) | Trackbacks (0)

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

...and all of the proof of concept codes were released today.

#1 Bill (Homepage) on 2005-10-13 22:16 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	Enclosing asterisks marks text as bold (word), underscore are made via _word_. Standard emoticons like :-) and ;-) are converted to images. BBCode format allowed E-Mail addresses will not be displayed and will only be used for E-Mail notifications To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly. Enter the string from the spam-prevention image above:
	Remember Information? Subscribe to this entry

White Hat Liberal Geek Dad