RETIRED: Microsoft August Advance Notification Multiple Vulnerabilities
BID:19331
Info
RETIRED: Microsoft August Advance Notification Multiple Vulnerabilities
| Bugtraq ID: | 19331 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Aug 03 2006 12:00AM |
| Updated: | Apr 17 2007 03:31PM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows XP 0 Microsoft Windows Server 2003 Web Edition SP1 Beta 1 Microsoft Windows Server 2003 Web Edition SP1 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Standard Edition SP1 Beta 1 Microsoft Windows Server 2003 Standard Edition SP1 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1 Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1 Microsoft Windows Server 2003 Enterprise Edition SP1 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter x64 Edition Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1 Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1 Microsoft Windows Server 2003 Datacenter Edition SP1 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Terminal Server 4.0 SP6a Microsoft Windows NT Terminal Server 4.0 SP6 Microsoft Windows NT Terminal Server 4.0 SP5 Microsoft Windows NT Terminal Server 4.0 SP4 Microsoft Windows NT Terminal Server 4.0 SP3 Microsoft Windows NT Terminal Server 4.0 SP2 Microsoft Windows NT Terminal Server 4.0 SP1 Microsoft Windows NT Terminal Server 4.0 Microsoft Windows NT Server 4.0 SP6a Microsoft Windows NT Server 4.0 SP6 Microsoft Windows NT Server 4.0 SP5 Microsoft Windows NT Server 4.0 SP4 Microsoft Windows NT Server 4.0 SP3 Microsoft Windows NT Server 4.0 SP2 Microsoft Windows NT Server 4.0 SP1 Microsoft Windows NT Server 4.0 Microsoft Windows NT Enterprise Server 4.0 SP6a Microsoft Windows NT Enterprise Server 4.0 SP6 Microsoft Windows NT Enterprise Server 4.0 SP5 Microsoft Windows NT Enterprise Server 4.0 SP4 Microsoft Windows NT Enterprise Server 4.0 SP3 Microsoft Windows NT Enterprise Server 4.0 SP2 Microsoft Windows NT Enterprise Server 4.0 SP1 Microsoft Windows NT Enterprise Server 4.0 Microsoft Windows ME Microsoft Windows 98SE Microsoft Windows 98 Microsoft Windows 95 Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Office XP Developer Edition Microsoft Office XP SP3 Microsoft Office XP SP2 Microsoft Office XP SP1 Microsoft Office XP Microsoft Office 98 For Mac Microsoft Office 97 Korean Version Microsoft Office 97 Japanese Version Microsoft Office 97 Chinese Version Microsoft Office 97 Microsoft Office 2004 for Mac 0 Microsoft Office 2003 SP3 Microsoft Office 2003 SP2 Microsoft Office 2003 SP1 Microsoft Office 2003 0 Microsoft Office 2001 For Macintosh SR1 Microsoft Office 2001 For Macintosh Microsoft Office 2001 for Mac Microsoft Office 2000 Korean Version Microsoft Office 2000 Japanese Version Microsoft Office 2000 Chinese Version Microsoft Office 2000 SP3 Microsoft Office 2000 SP2 Microsoft Office 2000 SP1 Microsoft Office 2000 Microsoft Internet Explorer for Unix SP2 Microsoft Internet Explorer for Unix SP2 |
| Not Vulnerable: | |
Discussion
RETIRED: Microsoft August Advance Notification Multiple Vulnerabilities
Microsoft has released advance notification that the vendor will be releasing twelve security bulletins for Windows and Office on August 8, 2006. The highest severity rating for these issues is 'Critical'.
Further details about these issues are not currently available. Individual BIDs will be created and this record will be removed when the security bulletins are released.
These vulnerabilities have been assigned to the following BIDs:
19409 Microsoft Windows Server Service Remote Buffer Overflow Vulnerability
19319 Microsoft Winsock Gethostbyname Buffer Overflow Vulnerability
19404 Microsoft Windows DNS Client Buffer Overrun Vulnerability
18682 Microsoft Internet Explorer OuterHTML Redirection Handling Information Disclosure Vulnerability
19312 Microsoft Internet Explorer HTML Layout and Positioning Remote Code Execution Vulnerability
19316 Microsoft Internet Explorer Chained Cascading Style Sheets Remote Code Execution Vulnerability
18277 Microsoft Internet Explorer Frameset Memory Corruption Vulnerability
19340 Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability
19400 Microsoft Internet Explorer Source Element Cross-Domain Information Disclosure Vulnerability
19339 Microsoft Internet Explorer Window Location Cross-Domain Information Disclosure Vulnerability
11826 Microsoft Internet Explorer FTP URI Arbitrary FTP Server Command Execution Vulnerability
19667 Microsoft Internet Explorer HTTP 1.1 and Compression Long URI Buffer Overflow Vulnerability
19987 Microsoft Internet Explorer HTTP 1.1 and Compression Long URI Buffer Overflow Variant Vulnerability
18198 Microsoft Windows MHTML URI Buffer Overflow Vulnerability
19417 Microsoft Management Console Zone Bypass Vulnerability
19389 Microsoft Windows Explorer Drag and Drop Remote Code Execution Vulnerability
18769 Microsoft Windows HTML Help HHCtrl ActiveX Control Memory Corruption Vulnerability
19414 Microsoft Visual Basic for Applications Document Check Buffer Overflow Vulnerability
18957 Microsoft Powerpoint Remote Code Execution Vulnerability
19341 Microsoft Powerpoint Remote Code Execution Vulnerability
19388 Microsoft Windows 2000 Kernel Local Privilege Escalation Vulnerability
18500 Microsoft HLINK.DLL Link Memory Corruption Vulnerability
19405 Microsoft Hyperlink Object Library Function Remote Buffer Overflow Vulnerability
19375 Microsoft Windows User Profile Privilege Escalation Vulnerability
19384 Microsoft Windows Unhandled Exception Remote Code Execution Vulnerability
Microsoft has released advance notification that the vendor will be releasing twelve security bulletins for Windows and Office on August 8, 2006. The highest severity rating for these issues is 'Critical'.
Further details about these issues are not currently available. Individual BIDs will be created and this record will be removed when the security bulletins are released.
These vulnerabilities have been assigned to the following BIDs:
19409 Microsoft Windows Server Service Remote Buffer Overflow Vulnerability
19319 Microsoft Winsock Gethostbyname Buffer Overflow Vulnerability
19404 Microsoft Windows DNS Client Buffer Overrun Vulnerability
18682 Microsoft Internet Explorer OuterHTML Redirection Handling Information Disclosure Vulnerability
19312 Microsoft Internet Explorer HTML Layout and Positioning Remote Code Execution Vulnerability
19316 Microsoft Internet Explorer Chained Cascading Style Sheets Remote Code Execution Vulnerability
18277 Microsoft Internet Explorer Frameset Memory Corruption Vulnerability
19340 Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability
19400 Microsoft Internet Explorer Source Element Cross-Domain Information Disclosure Vulnerability
19339 Microsoft Internet Explorer Window Location Cross-Domain Information Disclosure Vulnerability
11826 Microsoft Internet Explorer FTP URI Arbitrary FTP Server Command Execution Vulnerability
19667 Microsoft Internet Explorer HTTP 1.1 and Compression Long URI Buffer Overflow Vulnerability
19987 Microsoft Internet Explorer HTTP 1.1 and Compression Long URI Buffer Overflow Variant Vulnerability
18198 Microsoft Windows MHTML URI Buffer Overflow Vulnerability
19417 Microsoft Management Console Zone Bypass Vulnerability
19389 Microsoft Windows Explorer Drag and Drop Remote Code Execution Vulnerability
18769 Microsoft Windows HTML Help HHCtrl ActiveX Control Memory Corruption Vulnerability
19414 Microsoft Visual Basic for Applications Document Check Buffer Overflow Vulnerability
18957 Microsoft Powerpoint Remote Code Execution Vulnerability
19341 Microsoft Powerpoint Remote Code Execution Vulnerability
19388 Microsoft Windows 2000 Kernel Local Privilege Escalation Vulnerability
18500 Microsoft HLINK.DLL Link Memory Corruption Vulnerability
19405 Microsoft Hyperlink Object Library Function Remote Buffer Overflow Vulnerability
19375 Microsoft Windows User Profile Privilege Escalation Vulnerability
19384 Microsoft Windows Unhandled Exception Remote Code Execution Vulnerability
Exploit / POC
RETIRED: Microsoft August Advance Notification Multiple Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
RETIRED: Microsoft August Advance Notification Multiple Vulnerabilities
Solution:
Microsoft plans to release fixes to address these issues on August 8, 2006.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Microsoft plans to release fixes to address these issues on August 8, 2006.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
RETIRED: Microsoft August Advance Notification Multiple Vulnerabilities
References:
References: