[SECURITY-L] US-CERT Technical Cyber Security Alert TA11-221A -- Microsoft Updates for Multiple Vulnerabilities

CSIRT - UNICAMP security em unicamp.br
Qua Ago 10 09:30:02 -03 2011


----- Forwarded message from US-CERT Technical Alerts <technical-alerts em us-cert.gov> -----

From: US-CERT Technical Alerts <technical-alerts em us-cert.gov>
Subject: US-CERT Technical Cyber Security Alert TA11-221A -- Microsoft Updates for Multiple Vulnerabilities
To: technical-alerts em us-cert.gov
Date: Tue, 9 Aug 2011 15:37:51 -0400
Organization: US-CERT - +1 202-205-5266


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


                    National Cyber Alert System

              Technical Cyber Security Alert TA11-221A


Microsoft Updates for Multiple Vulnerabilities

   Original release date: August 09, 2011
   Last revised: --
   Source: US-CERT


Systems Affected

     * Microsoft Windows
     * Microsoft Office
     * Internet Explorer
     * .NET Framework
     * Microsoft Developer Tools


Overview

   There are multiple vulnerabilities in Microsoft Windows, Microsoft
   Office, Internet Explorer, .NET Framework, and Microsoft Developer
   Tools. Microsoft has released updates to address these
   vulnerabilities.


I. Description

   The Microsoft Security Bulletin Summary for August 2011 describes
   multiple vulnerabilities in Microsoft Windows, Microsoft Office,
   Internet Explorer, .NET Framework, and Microsoft Developer Tools.
   Microsoft has released updates to address these vulnerabilities.


II. Impact

   A remote, unauthenticated attacker could execute arbitrary code,
   cause a denial of service, or gain unauthorized access to your
   files or system.


III. Solution

   Apply updates

   Microsoft has provided updates for these vulnerabilities in the
   Microsoft Security Bulletin Summary for August 2011. That bulletin
   describes any known issues related to the updates. Administrators
   are encouraged to note these issues and test for any potentially
   adverse effects. In addition, administrators should consider using
   an automated-update distribution system such as Windows Server
   Update Services (WSUS).


IV. References

 * Microsoft Security Bulletin Summary for August 2011 -
   <http://www.microsoft.com/technet/security/bulletin/ms11-aug.mspx>

 * Microsoft Windows Server Update Services -
   <http://technet.microsoft.com/en-us/wsus/default.aspx>

 ____________________________________________________________________

   The most recent version of this document can be found at:

     <http://www.us-cert.gov/cas/techalerts/TA11-221A.html>
 ____________________________________________________________________

   Feedback can be directed to US-CERT Technical Staff. Please send
   email to <cert em cert.org> with "TA11-221A Feedback VU#758515" in
   the subject.
 ____________________________________________________________________

   For instructions on subscribing to or unsubscribing from this
   mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
 ____________________________________________________________________

   Produced 2011 by US-CERT, a government organization.

   Terms of use:

     <http://www.us-cert.gov/legal.html>
 ____________________________________________________________________

Revision History

  August 09, 2011: Initial release


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBTkGLuD6pPKYJORa3AQJ2swf9Gx3ksC+lpSJ6UQKoIRs0+8Fi9txsEUSo
DlOQPhAIdV4uM55fo+qBZ9GzNX0GAxQ/jqrmzKR0FDAKHE5f7DrkthzU+4aAMnVM
1Tg6eMDQ+YiWLV/y70qoQduNPclx+COHzfVabBOQFpKi8GOOhTOCG8NVZxGGEmiE
oKs3O7+ov8b61l+8h6U2dPKu8xvhnVh8gAMUCUDkW/w+rDwuIzNjQGiH9x51WKmR
5liqXnR1iICRMID5Z8GgeGJmKmYjq8L4hz+QmGXpdmL+7VNPSO4Jr7NE4Mlylark
mYtxHWNNLjo8x6F4qCLpUVIgnx6n048sZGfkkxrOLZG9mkS09V+mqA==
=3Hln
-----END PGP SIGNATURE-----

----- End forwarded message -----



Mais detalhes sobre a lista de discussão SECURITY-L