Si informano gli utenti che utilizzano sistemi operativi Microsoft che
\nsono stati rilasciati degli aggiornamenti critici di sicurezza. Per
\ntanto si raccomanda di provvedere, se non ancora fatto,
\nall`aggiornamento delle proprie macchine.<\/p>\n
Domenica Quartarella
\nServizio Calcolo<\/p>\n
—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA1<\/p>\n
Technical Cyber Security Alert TA05-284A
\n Microsoft Windows, Internet Explorer, and Exchange Server
\n Vulnerabilities<\/p>\n
Original release date: October 11, 2005
\n Last revised: —
\n Source: US-CERT<\/p>\n
Systems Affected<\/p>\n
* Microsoft Windows
\n * Microsoft Internet Explorer
\n * Microsoft Exchange Server<\/p>\n
For more complete information, refer to the Microsoft Security
\n Bulletin Summary for October 2005.<\/p>\n
Overview<\/p>\n
Microsoft has released updates that address critical vulnerabilities
\n in Windows, Internet Explorer, and Exchange Server. Exploitation of
\n these vulnerabilities could allow a remote, unauthenticated attacker
\n to execute arbitrary code or cause a denial of service on an affected
\n system.<\/p>\n
I. Description<\/p>\n
Microsoft Security Bulletins for October 2005 address vulnerabilities
\n in Windows and Internet Explorer. Further information is available in
\n the following US-CERT Vulnerability Notes:<\/p>\n
VU#214572 – Microsoft Plug and Play fails to properly validate user
\n supplied data<\/p>\n
Microsoft Plug and Play contains a flaw in the handling of message
\n buffers that may result in local or remote arbitrary code execution or
\n denial-of-service conditions.
\n (CAN-2005-2120)<\/p>\n
VU#883460 – Microsoft Collaboration Data Objects buffer overflow<\/p>\n
A buffer overflow in Microsoft Collaboration Data Objects may allow a
\n remote, unauthenticated attacker to execute arbitrary code on a
\n vulnerable system.
\n (CAN-2005-1987)<\/p>\n
VU#922708 – Microsoft Windows Shell fails to handle shortcut files
\n properly<\/p>\n
Microsoft Windows Shell does not properly handle some shortcut files
\n and may permit arbitrary code execution when a specially-crafted file
\n is opened.
\n (CAN-2005-2122)<\/p>\n
VU#995220 – Microsoft DirectShow buffer overflow<\/p>\n
A buffer overflow in Microsoft DirectShow may allow a remote,
\n unauthenticated attacker to execute arbitrary code on a vulnerable
\n system.
\n (CAN-2005-2128)<\/p>\n
VU#180868 – Microsoft Distributed Transaction Coordinator vulnerable
\n to buffer overflow via specially crafted network message<\/p>\n
Microsoft Distributed Transaction Coordinator (MSDTC) may be
\n vulnerable to a flaw that allows remote, unauthenticated attackers to
\n execute arbitrary code.
\n (CAN-2005-2119)<\/p>\n
VU#950516 – Microsoft COM+ contains a memory management flaw<\/p>\n
Microsoft COM+ contains a vulnerability due to a memory management
\n flaw that may allow an attacker to take complete control of an
\n affected system.
\n (CAN-2005-1978)<\/p>\n
VU#959049 – Several COM objects cause memory corruption in Microsoft
\n Internet Explorer<\/p>\n
Microsoft Internet Explorer will initialize COM objects that were not
\n intended to be used in the web browser. Several COM objects have been
\n identified that may allow an attacker to execute arbitrary code or
\n crash Internet Explorer.
\n (CAN-2005-2127)<\/p>\n
VU#680526 – Microsoft Internet Explorer allows non-ActiveX COM objects
\n to be instantiated<\/p>\n
Microsoft Internet Explorer will initialize COM objects that were not
\n intended to be used in the web browser. This may allow an attacker to
\n execute arbitrary code or crash Internet Explorer.
\n (CAN-2005-0163)<\/p>\n
II. Impact<\/p>\n
Exploitation of these vulnerabilities may allow a remote,
\n unauthenticated attacker to execute arbitrary code with SYSTEM
\n privileges or with the privileges of the user. If the user is logged
\n on with administrative privileges, the attacker could take complete
\n control of an affected system. An attacker may also be able to cause a
\n denial of service.<\/p>\n
III. Solution<\/p>\n
Apply Updates<\/p>\n
Microsoft has provided the updates for these vulnerabilities in the
\n Security Bulletins and on the Microsoft Update site.<\/p>\n
Workarounds<\/p>\n
Please see the following US-CERT Vulnerability Notes for workarounds.<\/p>\n
Appendix A. References<\/p>\n
* Microsoft Security Bulletin Summary for October 2005 – * US-CERT Vulnerability Note VU#214572 – * US-CERT Vulnerability Note VU#883460 – * US-CERT Vulnerability Note VU#922708 – * US-CERT Vulnerability Note VU#995220 – * US-CERT Vulnerability Note VU#180868 – * US-CERT Vulnerability Note VU#950516 – * US-CERT Vulnerability Note VU#959049 – * US-CERT Vulnerability Note VU#680526 – * CAN-2005-2120 – * CAN-2005-1987 – * CAN-2005-2122 – * CAN-2005-2128 – * CAN-2005-2119 – * CAN-2005-1978 – * CAN-2005-2127 – * CAN-2005-0163 – * Microsoft Update – <update.microsoft.com\/microsoftupdate<\/a>><\/p>\n _________________________________________________________________<\/p>\n The most recent version of this document can be found at:<\/p>\n <www.us-cert.gov\/cas\/techalerts\/TA05-284A.html<\/a>> Feedback can be directed to US-CERT. Please send email to: Revision History<\/p>\n Oct 11, 2004: Initial release Produced 2005 by US-CERT, a government organization.<\/p>\n Terms of use<\/p>\n
\n <www.microsoft.com\/technet\/security\/bulletin\/ms05-oct.mspx<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/214572<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/883460<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/922708<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/995220<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/180868<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/950516<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/959049<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/680526<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-2120<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-1987<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-2122<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-2128<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-2119<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-1978<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-2127<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-0163<\/a>><\/p>\n
\n _________________________________________________________________<\/p>\n
\n <cert@cert.org<\/a>> with “TA05-284A Feedback VU#959049” in the subject.
\n _________________________________________________________________<\/p>\n
\n _________________________________________________________________<\/p>\n