|
ALARM Group ALERT — click for a description of ALARM, The Computing Alert System Alert Number: 011105-01 Alert Date: 01/11/05 Alert Title: Microsoft Updates its security bulletin for January Update-to: none OS/Platform/Application: Microsoft Windows XP (Service Packs 1 and 2, 64-Bit Edition Service Pack, 64-Bit Edition Version 2003) Microsoft Windows Server 2003 (including 64-Bit Edition) Microsoft Windows 2000 (Service Packs 3 and 4) Microsoft Windows NT Server 4.0 (Terminal Server Edition Service pack 6) Microsoft Windows 98, 98 SE, ME Microsoft Internet Explorer 6 (Service Pack 1) Category: ALERT Severity: MEDIUM Attention: Windows System Administrators, Desktop Support Personnel |
Summary: On January 11, Microsoft released its scheduled Security Bulletin for January. Included in this monthly release are two updates listed as 'critical' by the vendor that address vulnerabilities in HTML ActiveX control (MS05-001) and Cursor and Icon Format Handling (MS05-002). A 3rd update (listed as 'important') addresses a vulnerability in the Windows Indexing Service. The impact of all three vulnerabilities is being listed as 'remote code execution' by Microsoft.Recommended Actions: It is recommended that you read bulletins MS05-001, MS-05-002, and MS05-003) and (if appropriate) apply the patches immediately as per the instructions detailed in the bulletins.
ITS Actions: At this time, ITS is taking no specific actions to counter the vulnerabilities detailed in this latest set of security bulletins. An update will be issued if this situation changes.
Resources:
Security Bulletin Summary Page:
http://www.microsoft.com/technet/security/bulletin/ms05-jan.mspxMS05-0001:
http://www.microsoft.com/technet/security/bulletin/MS05-001.mspxMS05-0002:
http://www.microsoft.com/technet/security/bulletin/MS05-002.mspxMS05-0003:
http://www.microsoft.com/technet/security/bulletin/MS05-003.mspxWindows Automated Update Page:
http://v4.windowsupdate.microsoft.com/
