kayodeok's Weblog

Tuesday 11 November 2003

MS Security Bulletins 11 November

New MS Security Bulletins issued today:

Microsoft Security Bulletin MS03-048

• Technical: Cumulative Security Update for Internet Explorer (824145)
• Knowledgebase: MS03-048: November 2003 Cumulative Security Update for Internet Explorer
• Secunia: Microsoft Internet Explorer Multiple Vulnerabilities

Microsoft Security Bulletin MS03-049

• Technical: Buffer Overrun in the Workstation Service Could Allow Code Execution (828749)
• Knowledgebase: MS03-049: Buffer Overrun in the Workstation Service Could Allow Code Execution
• Secunia: Microsoft Windows Workstation Service Buffer Overflow

Microsoft Security Bulletin MS03-050

• Technical: Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run (831527)
• Knowledgebase: MS03-050: Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run
• Secunia: Microsoft Word and Excel Execution of Arbitrary Code

Microsoft Security Bulletin MS03-051

• Technical: Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (813360)
• Knowledgebase: MS03-051: Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution
• Secunia: Microsoft Frontpage Server Extensions Remotely Exploitable Buffer Overflow

Microsoft Security Bulletin MS02-050 (Revised)

• Technical: Certificate Validation Flaw Could Enable Identity Spoofing (Q329115)
• Knowledgebase: MS02-050: Certificate Validation Flaw Might Permit Identity Spoofing

Related Entry

• MS Security Bulletins - 15 October

Related News

• End-user: What You Should Know About the Windows Security Updates for November 2003
• End-user: Protect Your PC
• Security Holes: Unpatched Internet Explorer Bugs
• Wired: Security Flaws Rankle Microsoft
• ZDNet: Microsoft gears up monthly patch release
• CNet: Microsoft releases Windows, Office fixes
• ZDNet: Microsoft defends patch policy
• Infoworld: CERT warns about new Microsoft vulnerability
• Eweek: New Windows Worm on the Way?
• Eweek: Securing Windows: Inside Microsoft's Battle to Deliver Secure Software
• Eweek: Bugs, Old File Dates in New Microsoft Patches
• CNet: Mail server flaw opens Exchange to spam

Update:On 17 November, Infoworld reported that an Attack Code exists for the latest Windows Vulnerability.