RETIRED: Microsoft October Advance Notification Multiple Vulnerabilities
BID:20357
Info
RETIRED: Microsoft October Advance Notification Multiple Vulnerabilities
| Bugtraq ID: | 20357 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Oct 05 2006 12:00AM |
| Updated: | Apr 17 2007 06:11PM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows XP 0 Microsoft Windows Server 2003 Web Edition SP1 Beta 1 Microsoft Windows Server 2003 Web Edition SP1 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Standard Edition SP1 Beta 1 Microsoft Windows Server 2003 Standard Edition SP1 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1 Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1 Microsoft Windows Server 2003 Enterprise Edition SP1 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter x64 Edition Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1 Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1 Microsoft Windows Server 2003 Datacenter Edition SP1 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Terminal Server 4.0 SP6a Microsoft Windows NT Terminal Server 4.0 SP6 Microsoft Windows NT Terminal Server 4.0 SP5 Microsoft Windows NT Terminal Server 4.0 SP4 Microsoft Windows NT Terminal Server 4.0 SP3 Microsoft Windows NT Terminal Server 4.0 SP2 Microsoft Windows NT Terminal Server 4.0 SP1 Microsoft Windows NT Terminal Server 4.0 Microsoft Windows NT Server 4.0 SP6a Microsoft Windows NT Server 4.0 SP6 Microsoft Windows NT Server 4.0 SP5 Microsoft Windows NT Server 4.0 SP4 Microsoft Windows NT Server 4.0 SP3 Microsoft Windows NT Server 4.0 SP2 Microsoft Windows NT Server 4.0 SP1 Microsoft Windows NT Server 4.0 Microsoft Windows NT Enterprise Server 4.0 SP6a Microsoft Windows NT Enterprise Server 4.0 SP6 Microsoft Windows NT Enterprise Server 4.0 SP5 Microsoft Windows NT Enterprise Server 4.0 SP4 Microsoft Windows NT Enterprise Server 4.0 SP3 Microsoft Windows NT Enterprise Server 4.0 SP2 Microsoft Windows NT Enterprise Server 4.0 SP1 Microsoft Windows NT Enterprise Server 4.0 Microsoft Windows ME Microsoft Windows 98SE Microsoft Windows 98 Microsoft Windows 95 Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Office XP Developer Edition Microsoft Office XP SP3 Microsoft Office XP SP2 Microsoft Office XP SP1 Microsoft Office XP Microsoft Office 98 For Mac Microsoft Office 97 Korean Version Microsoft Office 97 Japanese Version Microsoft Office 97 Chinese Version Microsoft Office 97 Microsoft Office 2004 for Mac 0 Microsoft Office 2003 SP3 Microsoft Office 2003 SP2 Microsoft Office 2003 SP1 Microsoft Office 2003 0 Microsoft Office 2001 For Macintosh SR1 Microsoft Office 2001 For Macintosh Microsoft Office 2001 for Mac Microsoft Office 2000 Korean Version Microsoft Office 2000 Japanese Version Microsoft Office 2000 Chinese Version Microsoft Office 2000 SP3 Microsoft Office 2000 SP2 Microsoft Office 2000 SP1 Microsoft Office 2000 Microsoft Internet Explorer for Unix SP2 Microsoft Internet Explorer for Unix SP2 Microsoft Internet Explorer 5.0.1 SP4 Microsoft Internet Explorer 5.0.1 SP3 Microsoft Internet Explorer 5.0.1 SP2 Microsoft Internet Explorer 5.0.1 SP1 Microsoft Internet Explorer 5.0.1 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4 Microsoft .NET Framework 2.0 BETA Microsoft .NET Framework 2.0 Microsoft .NET Framework 1.1 SP3 Microsoft .NET Framework 1.1 SP2 Microsoft .NET Framework 1.1 SP1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.0 SP3 Microsoft .NET Framework 1.0 SP2 Microsoft .NET Framework 1.0 SP1 Microsoft .NET Framework 1.0 |
| Not Vulnerable: | |
Discussion
RETIRED: Microsoft October Advance Notification Multiple Vulnerabilities
Microsoft has released advance notification that the vendor will be releasing 11 security bulletins for Windows, Office, and .NET Framework on October 10, 2006. The highest severity rating for these issues is 'Critical'.
Further details about these issues are not currently available. Individual BIDs will be created for each issue and this record will be removed when the security bulletins are released.
These vulnerabilities have been assigned to the following BIDs:
20337 Microsoft ASP.NET AutoPostBack Variable Cross-Site Scripting Vulnerability
19030 Microsoft WebViewFolderIcon ActiveX Control Buffer Overflow Vulnerability
20304 Microsoft PowerPoint Object Pointer Remote Code Execution Vulnerability
20322 Microsoft PowerPoint Data Record Remote Code Execution Vulnerability
20325 Microsoft PowerPoint Record Improper Memory Access Remote Code Execution Vulnerability
20226 Microsoft PowerPoint Unspecified Remote Code Execution Vulnerability
20344 Microsoft Excel DATETIME Remote Code Execution Vulnerability
18872 Microsoft Excel Style Handling and Repair Remote Code Execution Vulnerability
20345 Microsoft Excel Lotus 1-2-3 File Handling Remote Code Execution Vulnerability
20391 Microsoft Excel COLINFO Remote Code Execution Vulnerability
20341 Microsoft Word Malformed String Remote Code Execution Vulnerability
20358 Microsoft Word Mail Merge Remote Code Execution Vulnerability
19835 Microsoft Word Malformed Stack Remote Code Execution Vulnerability
20387 Microsoft Word Mac Remote Code Execution Vulnerability
20339 Microsoft XML Core Services Information Disclosure Vulnerability
20338 Microsoft Windows XML Core Services XSLT Buffer Overrun Vulnerability
20382 Microsoft Office Improper Memory Access Remote Code Execution Vulnerability
20383 Microsoft Office Malformed Chart Record Remote Code Execution Vulnerability
20384 Microsoft Office Malformed Record Remote Code Execution Vulnerability
20320 Microsoft Office Smart Tag Remote Code Execution Vulnerability
19215 Microsoft Windows SMB PIPE Remote Denial of Service Vulnerability
20373 Microsoft Windows SMB Rename Remote Denial of Service Vulnerability
13124 Multiple Vendor TCP/IP Implementation ICMP Remote Denial Of Service Vulnerabilities
10183 Multiple Vendor TCP Sequence Number Approximation Vulnerability
13658 Microsoft IPv6 TCP/IP Loopback LAND Denial of Service Vulnerability
20318 Microsoft Windows Object Packager Remote Code Execution Vulnerability
Microsoft has released advance notification that the vendor will be releasing 11 security bulletins for Windows, Office, and .NET Framework on October 10, 2006. The highest severity rating for these issues is 'Critical'.
Further details about these issues are not currently available. Individual BIDs will be created for each issue and this record will be removed when the security bulletins are released.
These vulnerabilities have been assigned to the following BIDs:
20337 Microsoft ASP.NET AutoPostBack Variable Cross-Site Scripting Vulnerability
19030 Microsoft WebViewFolderIcon ActiveX Control Buffer Overflow Vulnerability
20304 Microsoft PowerPoint Object Pointer Remote Code Execution Vulnerability
20322 Microsoft PowerPoint Data Record Remote Code Execution Vulnerability
20325 Microsoft PowerPoint Record Improper Memory Access Remote Code Execution Vulnerability
20226 Microsoft PowerPoint Unspecified Remote Code Execution Vulnerability
20344 Microsoft Excel DATETIME Remote Code Execution Vulnerability
18872 Microsoft Excel Style Handling and Repair Remote Code Execution Vulnerability
20345 Microsoft Excel Lotus 1-2-3 File Handling Remote Code Execution Vulnerability
20391 Microsoft Excel COLINFO Remote Code Execution Vulnerability
20341 Microsoft Word Malformed String Remote Code Execution Vulnerability
20358 Microsoft Word Mail Merge Remote Code Execution Vulnerability
19835 Microsoft Word Malformed Stack Remote Code Execution Vulnerability
20387 Microsoft Word Mac Remote Code Execution Vulnerability
20339 Microsoft XML Core Services Information Disclosure Vulnerability
20338 Microsoft Windows XML Core Services XSLT Buffer Overrun Vulnerability
20382 Microsoft Office Improper Memory Access Remote Code Execution Vulnerability
20383 Microsoft Office Malformed Chart Record Remote Code Execution Vulnerability
20384 Microsoft Office Malformed Record Remote Code Execution Vulnerability
20320 Microsoft Office Smart Tag Remote Code Execution Vulnerability
19215 Microsoft Windows SMB PIPE Remote Denial of Service Vulnerability
20373 Microsoft Windows SMB Rename Remote Denial of Service Vulnerability
13124 Multiple Vendor TCP/IP Implementation ICMP Remote Denial Of Service Vulnerabilities
10183 Multiple Vendor TCP Sequence Number Approximation Vulnerability
13658 Microsoft IPv6 TCP/IP Loopback LAND Denial of Service Vulnerability
20318 Microsoft Windows Object Packager Remote Code Execution Vulnerability
Exploit / POC
RETIRED: Microsoft October Advance Notification Multiple Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
RETIRED: Microsoft October Advance Notification Multiple Vulnerabilities
Solution:
Microsoft plans to release fixes to address these issues on October 10, 2006.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Microsoft plans to release fixes to address these issues on October 10, 2006.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
RETIRED: Microsoft October Advance Notification Multiple Vulnerabilities
References:
References: