Microsoft Security Updates: February 2006

[NewsBot]

Microsoft has just posted their security patch builletin for the month of February. As usual all required patches for your PC can be found on Microsoft Update. Here's a brief summary of the six patches released this month:







MS06-004: Cumulative Security Update for Internet Explorer (910620)

Critical

A vulnerability exists in the Graphics Rendering Engine that could allow remote code execution.







MS06-005: Vulnerability in Windows Media Player Could Allow Remote Code Execution (911565)

Critical

A vulnerability exists in the way that Windows Media Player processes certain files that could allow remote code execution.







MS06-006: Vulnerability in Windows Media Player Plug-in with Non-Microsoft Internet Browsers Could Allow Remote Code Execution (911564)



Important

A remote code execution vulnerability exists in the Windows Media Player plug-in for non-Microsoft Internet browsers that can allow remote code execution.







MS06-007: Vulnerability in TCP/IP Could Allow Denial of Service (913446)



Important

A vulnerability exists that could allow an attacker to send a specially crafted IGMP that could cause an affected system to stop responding.







MS06-008: Vulnerability in Web Client Service Could Allow Remote Code Execution (911927)



Important

A vulnerability exists in the Windows Web Client Service that could allow an attacker to take complete control of an affected system. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.







MS06-009: Vulnerability in the Korean Input Method Editor Could Allow Elevation of Privilege (901190)



Important

A vulnerability exists in the Windows and Office Korean Input Method Editor that could allow an attacker to take complete control of an affected system. For an attack to be successful an attacker must be able to interactively log on to the affected system.



Many people are having issues with the MS06-007 patch when installing it from Microsoft Update. Users claimed that having a patched tcpip.sys file causes the error. There were a few smaller releases from Microsoft today including updates for Outlook, PowerPoint 2000, and a new Malicious Software Removal Tool. On a releated note, Apple has just released OS X 10.4.5 for folks to download.





View: Neowin Forum Discussion



View: Microsoft Security Bulletin Summary for February | Microsoft Update

Read full story...


News source: Full Story