Microsoft problem lagiiiiiiii.........

fingerprint

Update patches geng......

Microsoft Windows, Office, and IIS Vulnerabilities

   Original release date: July 11, 2006
   Last revised: --
   Source: US-CERT


Systems Affected

     * Microsoft Windows
     * Microsoft Office
     * Microsoft Office for Mac
     * Microsoft Access
     * Microsoft Excel and Excel Viewer
     * Microsoft FrontPage
     * Microsoft Outlook
     * Microsoft PowerPoint
     * Microsoft Project
     * Microsoft Publisher
     * Microsoft Visio
     * Microsoft Word and Word Viewer


Overview

     Critical vulnerabilities in Microsoft Windows and Microsoft Office
     may allow an attacker to take control of your computer.


Solution

Apply Update

     Microsoft has provided updates to remedy these vulnerabilities. To
     obtain these updates, visit the Microsoft Update web site. US-CERT
     also recommends enabling Automatic Updates.

     Microsoft Office 2000 users must visit the Microsoft Office Update
     web site to get the appropriate updates.

     Apple Mac OS X users should obtain updates from the Mactopia web
     site.


Description

     Vulnerabilities in Microsoft Windows and Microsoft Office may allow
     an attacker to access your computer, install and run malicious
     software on your computer, or cause it to crash.

     For more technical information, see US-CERT Technical Alert
     TA06-192A.


References

     * Microsoft Security Bulletin Summary for July 2006 -
       <http://www.microsoft.com/technet/security/bulletin/ms06-jul.mspx>

     * Technical Cyber Security Alert TA06-167A -
       <http://www.us-cert.gov/cas/techalerts/TA06-167A.html>

     * US-CERT Vulnerability Notes for Microsoft Updates for July 2006 -
       <http://www.kb.cert.org/vuls/byid?searchview&query=ms06-jul>

     * US-CERT Vulnerability Note VU#395588 -
       <http://www.kb.cert.org/vuls/id/395588>

     * US-CERT Vulnerability Note VU#189140 -
       <http://www.kb.cert.org/vuls/id/189140>

     * US-CERT Vulnerability Note VU#257164 -
       <http://www.kb.cert.org/vuls/id/257164>

     * US-CERT Vulnerability Note VU#802324 -
       <http://www.kb.cert.org/vuls/id/802324>

     * US-CERT Vulnerability Note VU#580036 -
       <http://www.kb.cert.org/vuls/id/580036>

     * US-CERT Vulnerability Note VU#609868 -
       <http://www.kb.cert.org/vuls/id/609868>

     * US-CERT Vulnerability Note VU#409316 -
       <http://www.kb.cert.org/vuls/id/409316>

     * US-CERT Vulnerability Note VU#459388 -
       <http://www.kb.cert.org/vuls/id/459388>

     * US-CERT Vulnerability Note VU#668564 -
       <http://www.kb.cert.org/vuls/id/668564>

     * CVE-2006-0026 -
       <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0026>

     * CVE-2006-1314 -
       <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1314>

     * CVE-2006-2372 -
       <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2372>

     * CVE-2006-3059 -
       <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3059>

     * CVE-2006-1316 -
       <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1316>

     * CVE-2006-1540 -
       <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1540>

     * CVE-2006-2389 -
       <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2389>

     * CVE-2006-0033 -
       <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0033>

     * CVE-2006-0007 -
       <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0007>

     * Microsoft Update - <https://update.microsoft.com/microsoftupdate/>

     * Microsoft Office Update - <http://officeupdate.microsoft.com/>

     * Mactopia - <http://www.microsoft.com/mac/>


____________________________________________________________________

   The most recent version of this document can be found at:

     <http://www.us-cert.gov/cas/alerts/SA06-192A.html>
____________________________________________________________________

   Feedback can be directed to US-CERT. Please send email to
   <[email protected]> with "SA06-192A Feedback VU#802324" in the subject.
____________________________________________________________________

   Mailing list information:

     <http://www.us-cert.gov/cas/>
____________________________________________________________________

   Produced 2006 by US-CERT, a government organization.

   Terms of use:

     <http://www.us-cert.gov/legal.html>
____________________________________________________________________

Revision History

   July 11, 2006: Initial release

bzzts

firewall aje tak cukup ke? nak patch-patch ni, bill gates mai tambah harddisk aku la. :ketuk:

BTW, thanks for the info. :bgrin:

ultra78

hampeh la.kalau patch sure kena restrart.kalo pc biasa ok la.tapi kalo server running 24/7,ngamuk la user.hampeh tul...kena buat planned maintenance le ni...

limaukasturis

agak2 home user cam aku ni rerasa perlu x install patch2 nie... coz aku rasa cam dah stabil ngan apa yang ada je... lagi pun saper yang nak hack home user yang x de apa2 kepentingan kan..

rienn

Originally posted by limaukasturis at 14-7-2006 01:36 AM
agak2 home user cam aku ni rerasa perlu x install patch2 nie... coz aku rasa cam dah stabil ngan apa yang ada je... lagi pun saper yang nak hack home user yang x de apa2 kepentingan kan..

rienn pun malas gak nak install benda ni.. makan space.. tapi who knows what's on the hackers mind? maybe kita rasa takder apa-apa kepentingan, tapi dia lak saja suka-suka or nak test skill jer...

bzzts

hackers: dia guna IP kita atau jadikan pc kita sbg proxy utk hack benda lain kot.

hujan

takde kepentingan ko cakap...
ok sat aku hack pc ko kendian tukar wallpaper porno, access gambo2 ko kendian post kat internet, delete system file ko, access passwd yahoo ko, access passwd streamyx ko dll...

tu baru sikit tu...[contoh ajer] :cak:

ultra78

Originally posted by hujan at 14-7-2006 10:24 PM
takde kepentingan ko cakap...
ok sat aku hack pc ko kendian tukar wallpaper porno, access gambo2 ko kendian post kat internet, delete system file ko, access passwd yahoo ko, access passwd streamyx ...

pastu hacker tu login masuk forum.cari pakai id ko dan posting meraban dlm forum... :cak:

peace

lepas tu hacker tu guna pc nko hantar emel ugutan ke CT atau Pak Lah....

peerrgghh.....

riffer_tapper

ct dgn pak lah pun reply balik email dia

abuqaw

lepas tue pak lah Cc dan Bcc kat semua anggota kabinet termasuk samy Vellu........
Samy Vellu ckp, " saya kerja punya worang pun dpt email layang".....

[ Last edited by  abuqaw at 3-8-2006 12:46 AM ]

riffer_tapper

pastu kecoh arr cite ni masuk paper dgn tv...

ariean

cam main sambunng ayt je korang nie........

ultra78

Originally posted by ariean at 15-8-2006 09:52 PM
cam main sambunng ayt je korang nie........

dah jadi bod borak..hehehe

peace

Originally posted by riffer_tapper at 3-8-2006 08:29 AM
pastu kecoh arr cite ni masuk paper dgn tv...

lepas tu muka fingerprint masuk tv dalam perjalanan ke mahkamah... sambil memakai kopiah (tunjuk alim depan hakim).....

hujan

lepas tu muka fingerprint masuk tv dalam perjalanan ke mahkamah... sambil memakai kopiah (tunjuk alim depan hakim).....

time berjalan ke van polis, sambil menari2 mcm org mereng, bangga muka masuk TV, satu malaya kenal...
famous giler tumpas datuk k dan siti...

prince7

pas tu kena jamin ngan mak ayah