|
ALARM Group ALERT — click for a description of ALARM, The Computing Alert System Alert Number: 091504-01 Alert Date: 09/15/04 Alert Title: Microsoft releases two security bulletins for September Update-to: None OS/Platform/Application: Microsoft Windows XP (XP, Service Pack 1, 64-Bit Edition Service Pack 1, 64-Bit Edition Version 2003) Microsoft Windows Server 2003 (including 64-Bit Edition) Microsoft Windows 2000 Server (Service Packs 2,3,and 4) Microsoft Windows NT Server 4.0 (Service Pack 6a, Terminal Server Edition Service pack 6) Microsoft Windows NT WorkStation 4.0 (Service Pack 6a) Microsoft Windows 98, 98 SE, ME Microsoft Office 2003 Microsoft Office XP Service Pack 3
Visio 2003 (All versions) |
Summary: On September 14, Microsoft sent notice of two new security bulletins (MS04-027 and MS04-028). MS04-027 is listed by Microsoft as "Medium Severity"; it addresses a recently-discovered vulnerability in WordPerfect 5.x Converter that can allow a remote attacker to take complete control of a vulnerable system (user interaction is required for the vulnerability to be successful). MS04-028 is listed by Microsoft as "Critical Severity"; it addresses a newly-discovered vulnerability in the processing of JPEG file formats. As in the case of MS04-027, a remote attacker could use this vulnerability to take complete control of a vulnerable system.Recommended Actions: It is recommended that you read bulletins MS04-27 and MS04-28 (including all associated caveats and FAQs) and (if appropriate) apply the patches immediately as per the instructions detailed in the bulletins.
ITS Actions: At this time, ITS is taking no specific additional actions to address these updates.
Resources:
Automated Windows Update Page:
http://windowsupdate.microsoft.comSecurity bulletin for September 2004 Jump Page:
http://www.microsoft.com/technet/security/bulletin/ms04-sep.mspxSecurity bulletin MS04-027:
http://www.microsoft.com/technet/security/bulletin/ms04-027.mspxSecurity bulletin MS04-028:
http://www.microsoft.com/technet/security/bulletin/MS04-028.mspxMicrosoft-supplied tool to determine if your system is running any of the products (applications, etc) identified above:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;873374NOTE: PLEASE DO NOT REPLY TO THIS ALERT. Alerts distributed by ALARM are not intended to supplant whatever security measures you are currently following. Technology coordinators, as well as the entire Ualbany computing community should continue to take all necessary precautions against threats to system security and information integrity.
Current Students | New Students | Distance Learners | Faculty | New Faculty | Staff
Training | Schedules / Hours | Forms | FAQs & User Guides | Policies | About ITS | Home
