[ news_security_news ] McAfee Announces Protection Against Microsoft Vulnerabilities
SecurityProNews Staff Writer
2005-04-13
Insider Reports RSS Feed
McAfee provides system protection for the MS05-016, MS05-017, MS05-018, MS05-019, MS05-020, MS05-021, MS05-022 and MS05-023 vulnerabilities as announced by Microsoft Corporation yesterday.
These vulnerabilities have been reviewed by McAfee® AVERT(TM) (Anti-virus and Vulnerability Emergency Response Team) security research teams at McAfee, Inc. Based on its findings, McAfee AVERT recommends that users confirm the Microsoft product versioning outlined in the bulletins and update as recommended by Microsoft and McAfee, Inc. This includes deploying solutions to ensure protection against the exploits outlined in this advisory.
Microsoft Vulnerability Overview
MS05-016 -- Vulnerability in Windows Shell that Could Allow Remote Code Execution (893086)
MS05-017 -- Vulnerability in Message Queuing Could Allow Code Execution (892944)
MS05-018 -- Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege and Denial of Service (890859)
MS05-019 -- Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service (893066)
MS05-020 -- Cumulative Security Update for Internet Explorer (890923)
MS05-021 -- Vulnerability in Exchange Server Could Allow Remote Code Execution (894549)
MS05-022 -- Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)
MS05-023 -- Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169)
Scope of Potential Compromises
The eight new bulletins cover 18 vulnerabilities and range in scope from vulnerability in Windows Shell that, if exploited, could allow remote code execution, to vulnerability in Microsoft Exchange that could allow an attacker who successfully exploited this vulnerability to take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|