Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2003.0726 -- Microsoft Security Bulletin MS03-044
Buffer Overrun in Windows Help and Support Center Could Lead to System
Compromise (825119)
16 October 2003
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Windows Help and Support Center
Publisher: Microsoft
Operating System: Windows Server 2003 64-bit Edition
Windows Server 2003
Windows XP 64-bit Edition Version 2003
Windows XP 64-bit Edition
Windows XP Gold, Service Pack 1
Windows 2000, Service Pack 3, Service Pack 4
Windows 2000, Service Pack 2
Windows NT Server 4.0, TSE, Service Pack 6
Windows NT Server 4.0, Service Pack 6a
Windows NT Workstation 4.0, Service Pack 6a
Windows Millennium Edition
Impact: Administrator Compromise
Access Required: Remote
CVE Names: CAN-2003-0711
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Title: Buffer Overrun in Windows Help and Support Center Could Lead
to System Compromise (825119)
Date: October 15, 2003
Software: Microsoft Windows Millennium Edition; Microsoft Windows NT
Workstation 4.0, Service Pack 6a; Microsoft Windows NT Server 4.0,
Service Pack 6a; Microsoft Windows NT Server 4.0, Terminal Server
Edition, Service Pack 6; Microsoft Windows 2000, Service Pack 2;
Microsoft Windows 2000, Service Pack 3, Service Pack 4; Microsoft
Windows XP Gold, Service Pack 1; Microsoft Windows XP 64-bit Edition;
Microsoft Windows XP 64-bit Edition Version 2003; Microsoft Windows
Server 2003; Microsoft Windows Server 2003 64-bit Edition
Impact: Remote Code Execution
Maximum Severity Rating: Critical
Bulletin: MS03-044
The Microsoft Security Response Center has released Microsoft
Security Bulletin MS03-044
What Is It?
The Microsoft Security Response Center has released Microsoft
Security Bulletin MS03-044 which concerns a vulnerability in the
above listed versions of Windows. Customers are advised to review
the information in the bulletin, test and deploy the patch
immediately in their environments, if applicable.
More information is now available at
http://www.microsoft.com/technet/security/bulletin/MS03-044.asp
If you have any questions regarding this alert please contact your
Technical Account Manager or Application Development Consultant.
- -----BEGIN PGP SIGNATURE-----
Version: PGP 8.0
iQA/AwUBP42DTZoTaijrcixLEQItvACg7GvU0McnggCbw3ZywF6LUQOy5nwAoKrN
BIT17zxG6ONZ1eX6pm3GqwA1
=HUBb
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
If you believe that your computer system has been compromised or attacked in
any way, we encourage you to let us know by completing the secure National IT
Incident Reporting Form at:
http://www.auscert.org.au/render.html?it=3192
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business
hours which are GMT+10:00 (AEST). On call after hours
for member emergencies only.
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQCVAwUBP44sBih9+71yA2DNAQFVQgP+Kk98//A6a/81umLL3ftGHF6JafESM1tw
ALuMcEQGPSmvhP6kuVB6F378ktffxHcAqMTssTteiBV2TG6ARd01sSHjAgq7SZxA
BU07GodeCgOeG7gR2KE0fW+gkGS1NAeODBQpeWs8JXaShvTMg8k6gYC5PK5o1TWS
Us2LyLFqtyU=
=9eXx
-----END PGP SIGNATURE-----