Multiple Vulnerabilities in Microsoft Windows Components and Outlook Express

• Microsoft Windows Systems

Microsoft has released a Security
Bulletin Summary for July, 2004. There are several security bulletins
released in this summary.

I. Description

Microsoft's Security
Bulletin Summary for July, 2004 includes summaries of several
bulletins that address vulnerabilities in various Windows applications and
components.

For more technical information, see US-CERT
Technical Alert
TA04-196A.

II. Impact

An attacker may be able to control your computer if these vulnerabilities
are exploited.

III. Solution

Apply a patch

Microsoft has provided the patches for these vulnerabilities in the
Security
Bulletins and on Windows Update.

Do not follow unsolicited links

Do not click on unsolicited links received in email, instant messages, web
forums, or chat rooms. While this is generally a good security practice,
following this behavior will not prevent the exploitation of these
vulnerabilities in all cases.

Maintain updated anti-virus software

Anti-virus software with updated virus definitions may identify and
prevent some exploit attempts. Update your anti-virus software. More
information about viruses and anti-virus vendors is available on the US-CERT Computer
Virus Resources page.

Appendix A. Vendor Information
Specific information about the Security bulletins are available in the Security
Bulletin Summary for July, 2004 and the US-CERT Vulnerability Notes
for these issues.

Appendix B. References

• Microsoft's Security Bulletin Summary for July, 2004 - <http://www.microsoft.com/security/bulletins/200407_windows.mspx>
• US-CERT Technical Cyber Security Alert TA04-196A - <http://www.us-cert.gov/cas/techalerts/TA04-196A.html>
• US-CERT Vulnerability Note VU#106324 - <http://www.kb.cert.org/vuls/id/106324>
• US-CERT Vulnerability Note VU#187196 - <http://www.kb.cert.org/vuls/id/187196>
• US-CERT Vulnerability Note VU#920060 - <http://www.kb.cert.org/vuls/id/920060>
• US-CERT Vulnerability Note VU#228028 - <http://www.kb.cert.org/vuls/id/228028>
• US-CERT Vulnerability Note VU#717748 - <http://www.kb.cert.org/vuls/id/717748>
• US-CERT Vulnerability Note VU#647436 - <http://www.kb.cert.org/vuls/id/647436>
• US-CERT Vulnerability Note VU#868580 - <http://www.kb.cert.org/vuls/id/868580>
• US-CERT Vulnerability Note VU#869640 - <http://www.kb.cert.org/vuls/id/869640>
• Increase Your Browsing and E-Mail Safety - <http://www.microsoft.com/security/incident/settings.mspx>
• Working with Internet Explorer 6 Security Settings - <http://www.microsoft.com/windows/ie/using/howto/security/settings.mspx>

This alert was created by Jason A. Rafail. Feedback can be directed to
the Vulnerability Note authors: Jason
A. Rafail, Jeffrey P. Lanza, Chad R. Dougherty, Damon G. Morda, and Art
Manion.

Copyright 2004 Carnegie Mellon University.
Terms of use

Revision History

• July 14, 2004: Initial release
  

Last updated