Microsoft security alert.
February 13, 2007
Advisory overview
Qualys Vulnerability R&D Lab has released new vulnerability checks in the Enterprise TruRisk Platform to protect organizations against 21 vulnerabilities that were fixed in 12 bulletins announced today by Microsoft. Customers can immediately audit their networks for these and other new vulnerabilities by accessing their Qualys subscription. Visit Qualys Security Blog to prioritize remediation.
Non-Qualys customers can audit their network for these and other vulnerabilities by signing up for a Qualys Free Trial, or by trying Qualys Community Edition.
Vulnerability details
Microsoft has released 12 security bulletins to fix newly discovered flaws in their software. Qualys has released the following checks for these new vulnerabilities:
-
Microsoft OLE Dialog Could Allow Remote Code Execution (MS07-011)
- Severity
- Urgent 5
- Qualys ID
- 90378
- Vendor Reference
- MS07-011
- CVE Reference
- CVE-2007-0026
- CVSS Scores
- Base 7.6 / Temporal 5.6
- Description
-
A remote code execution vulnerability exists in the OLE Dialog component provided with Microsoft Windows. An attacker could attempt to exploit this vulnerability when a user interacts with a malformed embedded OLE object within a Rich Text Format (RTF) file.
Windows XP Embedded Systems:- For additional information regarding security updates for embedded systems, refer to the following MSDN blog(s):
February 2007 Windows XP Embedded Updates Now Available on the ECE (KB926436)
- Consequence
- An attacker who successfully exploits this vulnerability could take complete control of an affected system.
- Solution
-
Patch:
Following are links for downloading patches to fix the vulnerabilities:Microsoft Windows 2000 Service Pack 4 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=7b1a81d5-1072-49d9-a24a-0e2630f62d8cMicrosoft Windows XP Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b84661-25e3-4d38-95b1-8d3e7af565aaMicrosoft Windows XP Professional x64 Edition :
http://www.microsoft.com/downloads/details.aspx?FamilyId=57c1b19f-3242-457c-bedf-d35a8efe525cMicrosoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=eaed6f59-801e-45d7-9518-469d0de13cadMicrosoft Windows Server 2003 for Itanium based Systems and Microsoft Windows Server 2003 with SP1 for Itanium based Systems :
http://www.microsoft.com/downloads/details.aspx?FamilyId=cd1b18ae-bc8d-4d73-847f-4fa7ca672c88Microsoft Windows Server 2003 x64 Edition :
http://www.microsoft.com/downloads/details.aspx?FamilyId=11f4f8f6-b8ce-4a5f-b7ed-8389ccc56473Refer to Micrsoft Security Bulletin MS07-011 for further details.
-
Step-by-Step Interactive Training Could Allow Remote Code Execution (MS07-005)
- Severity
- Urgent 5
- Qualys ID
- 90379
- Vendor Reference
- MS07-005
- CVE Reference
- CVE-2006-3448
- CVSS Scores
- Base 9.3 / Temporal 7.3
- Description
- A remote code execution vulnerability exists in Step-by-Step Interactive Training because of the way that Step-by-Step Interactive Training handles bookmark link files.
- Consequence
- An attacker who successfully exploits this vulnerability could take complete control of an affected system. However, user interaction is required to exploit this vulnerability.
- Solution
-
Refer to Microsoft Security Bulletin MS07-005 for more information and instructions on downloading the patch that fixes this issue.
Microsoft has rated this issue as Important.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS07-005 Step by Step Interactive Training when installed on Microsoft Windows 2000 Service Pack 4
MS07-005 Step by Step Interactive Training when installed on Microsoft Windows Server 2003 for Itanium based Systems, Microsoft Windows Server 2003 with SP1 for Itanium based Systems, and Microsoft Windows Server 2003 with SP2 for Itanium based Systems
MS07-005 Step by Step Interactive Training when installed on Microsoft Windows Server 2003 x64 Edition and Microsoft Windows Server 2003 x64 Edition Service Pack 2
MS07-005 Step by Step Interactive Training when installed on Microsoft Windows Server 2003, Microsoft Windows Server 2003 Service Pack 1, and Microsoft Windows Server 2003 Service Pack 2
MS07-005 Step by Step Interactive Training when installed on Microsoft Windows XP Professional x64 Edition and Microsoft Windows XP Professional x64 Edition Service Pack 2
MS07-005 Step by Step Interactive Training when installed on Microsoft Windows XP Service Pack 2 and Microsoft Windows XP Service Pack 3
-
Windows Shell Could Allow Privilege Elevation (MS07-006)
- Severity
- Critical 4
- Qualys ID
- 90380
- Vendor Reference
- MS07-006
- CVE Reference
- CVE-2007-0211
- CVSS Scores
- Base 7.2 / Temporal 5.6
- Description
-
A privilege elevation vulnerability exists in Windows Shell, in the way that the operating system performs detection and registration of new hardware.
Windows XP Embedded Systems:- For additional information regarding security updates for embedded systems, refer to the following MSDN blog(s):
February 2007 Windows XP Embedded Updates Now Available on the ECE (KB928255)
- Consequence
- This vulnerability could allow an authenticated user to take complete control of the system.
- Solution
-
Patch:
Following are links for downloading patches to fix the vulnerabilities:Microsoft Windows XP Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=f821b3a0-4e5a-4737-b9bf-1249f6683f4dMicrosoft Windows XP Professional x64 Edition :
http://www.microsoft.com/downloads/details.aspx?FamilyId=75abff9b-c2b5-4151-b366-4be652882944Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=418acc52-0ebd-4623-81a7-5eacc21c3965Microsoft Windows Server 2003 for Itanium based Systems and Microsoft Windows Server 2003 with SP1 for Itanium based Systems :
http://www.microsoft.com/downloads/details.aspx?FamilyId=dc33a2fc-2d01-4577-b133-017493d1f278Microsoft Windows Server 2003 x64 Edition :
http://www.microsoft.com/downloads/details.aspx?FamilyId=c3e55066-b34e-485d-ac04-179f8e3a407aRefer to Micrsoft Security Bulletin MS07-006 for further details.
-
Windows Image Acquisition Service Could Allow Privilege Elevation (MS07-007)
- Severity
- Serious 3
- Qualys ID
- 90384
- Vendor Reference
- MS07-007
- CVE Reference
- CVE-2007-0210
- CVSS Scores
- Base 7.2 / Temporal 5.3
- Description
-
A privilege elevation vulnerability exists due to an unchecked buffer in the Windows Image Acquisition service in Windows XP Service Pack 2.
Windows Image Acquisition (WIA) enables imaging programs to communicate with imaging devices such as digital cameras and scanners.
Windows XP Embedded Systems:- For additional information regarding security updates for embedded systems, refer to the following MSDN blog(s):
February 2007 Windows XP Embedded Updates Now Available on the ECE (KB927802)
- Consequence
- An attacker who successfully exploits this vulnerability could take complete control of an affected system.
- Solution
-
Patch:
Following are links for downloading patches to fix the vulnerabilities:Microsoft Windows XP Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=ce695e0e-938c-4fc6-a9a2-0eb9fc3e5512Refer to Micrsoft Security Bulletin MS07-007 for further details.
-
HTML Help ActiveX Control Could Allow Remote Code Execution (MS07-008)
- Severity
- Urgent 5
- Qualys ID
- 90383
- Vendor Reference
- MS07-008
- CVE Reference
- CVE-2007-0214
- CVSS Scores
- Base 9.3 / Temporal 7.7
- Description
-
Microsoft HTML Help is the standard help system for the Windows platform. HTML Help ActiveX control is a program that is used to insert help navigation and secondary window functionality into an HTML file.
HTML Help ActiveX control methods do not perform sufficient parameter validation.
Windows XP Embedded Systems:- For additional information regarding security updates for embedded systems, refer to the following MSDN blog(s):
February 2007 Windows XP Embedded Updates Now Available on the ECE (KB928843)
- Consequence
- An attacker could exploit the vulnerability by constructing a specially crafted Web page that could potentially allow remote code execution if a user visits that page. An attacker who successfully exploits this vulnerability could take complete control of an affected system.
- Solution
-
Refer to Microsoft Security Bulletin MS07-008 for further details on this vulnerability and patch instructions.
Microsoft has rated this issue as Critical.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS07-008 Microsoft Windows 2000 Service Pack 4
MS07-008 Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
MS07-008 Microsoft Windows Server 2003 for Itanium based Systems and Microsoft Windows Server 2003 with SP1 for Itanium based Systems
MS07-008 Microsoft Windows Server 2003 x64 Edition
MS07-008 Microsoft Windows XP Professional x64 Edition
MS07-008 Microsoft Windows XP Service Pack 2
-
Microsoft Data Access Components Could Allow Remote Code Execution (MS07-009)
- Severity
- Urgent 5
- Qualys ID
- 90385
- Vendor Reference
- MS07-009
- CVE Reference
- CVE-2006-5559
- CVSS Scores
- Base 9.3 / Temporal 8.1
- Description
-
A remote code execution vulnerability exists in the ADODB.Connection ActiveX control that is provided as part of the ActiveX Data Objects (ADO) and that is distributed in MDAC.
Windows XP Embedded Systems:- For additional information regarding security updates for embedded systems, refer to the following MSDN blog(s):
February 2007 Windows XP Embedded Updates Now Available on the ECE (KB927779)
- Consequence
- An attacker who successfully exploits this vulnerability could take complete control of an affected system.
- Solution
-
Patch:
Following are links for downloading patches to fix the vulnerabilities:Microsoft Data Access Components 2.5 Service Pack 3 on Microsoft Windows 2000 Service Pack 4 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=EF163E3E-DD3B-4429-98A4-720DA2C96464Microsoft Data Access Components 2.8 Service Pack 1 on Microsoft Windows XP Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=6B0CDB65-AEF4-489F-B917-812D9F7687BDMicrosoft Data Access Components 2.8 on Microsoft Windows Server 2003 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=34D24335-4EC0-49E7-9E3F-787F89DD7B1DMicrosoft Data Access Components 2.8 on Microsoft Windows Server 2003 for Itanium based Systems :
http://www.microsoft.com/downloads/details.aspx?FamilyId=58322D1B-A1A8-4BA6-BA1B-6649013CC324Refer to Micrsoft Security Bulletin MS07-009 for further details.
-
Microsoft Malware Protection Engine Could Allow Remote Code Execution (MS07-010)
- Severity
- Urgent 5
- Qualys ID
- 90382
- Vendor Reference
- MS07-010
- CVE Reference
- CVE-2006-5270
- CVSS Scores
- Base 9.3 / Temporal 6.9
- Description
- Microsoft Malware Protection Engine is exposed to remote code execution issue because of the way that it parses Portable Document Format (PDF) files.
- Consequence
- An attacker could exploit the vulnerability by constructing a specially crafted PDF File that could potentially allow remote code execution when the target computer system receives, and the Microsoft Malware Protection Engine scans, the PDF file.
- Solution
-
Apply the latest Microsoft Malware Protection Engine update. The fix is available automatically via the automatic update feature. Refer to Microsoft Security Bulletin MS07-010 for further information.
Microsoft has rated this issue as Critical.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS07-010 Windows
MS07-010 Windows
-
Microsoft MFC Could Allow Remote Code Execution (MS07-012)
- Severity
- Urgent 5
- Qualys ID
- 90381
- Vendor Reference
- MS07-012
- CVE Reference
- CVE-2007-0025, CVE-2007-1512
- CVSS Scores
- Base 10 / Temporal 8.3
- Description
-
MFC component provided with Microsoft Windows and Visual Studio is exposed to remote code execution issue. An attacker could exploit this vulnerability when a user interacts with a malformed embedded OLE object within a Rich Text Format (RTF) file.
Windows XP Embedded Systems:- For additional information regarding security updates for embedded systems, refer to the following MSDN blog(s):
February 2007 Windows XP Embedded Updates Now Available on the ECE (KB924667)
- Consequence
- If a user is logged on with administrative user rights, an attacker who successfully exploits this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.
- Solution
-
Patch:
Following are links for downloading patches to fix the vulnerabilities:Microsoft Windows 2000 Service Pack 4 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=d6577f1f-0d9e-4856-b1d6-7e27657a3620Microsoft Windows XP Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=84ae4c62-89ae-410a-b34b-471e3c09ce98Microsoft Windows XP Professional x64 Edition and Microsoft Windows XP Professional x64 Edition Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=54e0dc33-6bad-476c-b4cf-b833d591aaadMicrosoft Windows Server 2003, Microsoft Windows Server 2003 Service Pack 1, and Microsoft Windows Server 2003 Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=934ca609-d6bc-4bf0-8233-969eb43d48bbMicrosoft Windows Server 2003 for Itanium based Systems, Microsoft Windows Server 2003 with SP1 for Itanium based Systems, and Microsoft Windows Server 2003 with SP2 for Itanium based Systems :
http://www.microsoft.com/downloads/details.aspx?FamilyId=67f52e93-cd57-4852-b838-a958ab9b23fbMicrosoft Windows Server 2003 x64 Edition and Microsoft Windows Server 2003 x64 Edition Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=f2ca9de9-f69e-4e34-9aa9-0b320d670e04Microsoft Visual Studio .NET 2002 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=711F05A8-CD67-4702-B079-3FF79A3AB4DEMicrosoft Visual Studio .NET 2002 Service Pack 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=124F2D2D-8CF3-47F3-A8FD-24A9FACF4FA4Microsoft Visual Studio .NET 2003 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=A05CE727-C5B5-4022-B7A0-D8861CE99209Microsoft Visual Studio .NET 2003 Service Pack 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=1DD6D8E7-390B-4E02-9F16-AB9D5EF7792ERefer to Micrsoft Security Bulletin MS07-012 for further details.
-
Microsoft RichEdit Could Allow Remote Code Execution (MS07-013)
- Severity
- Urgent 5
- Qualys ID
- 110054
- Vendor Reference
- MS07-013
- CVE Reference
- CVE-2006-1311
- CVSS Scores
- Base 9.3 / Temporal 6.9
- Description
-
RichEdit components provided with Microsoft Windows and Microsoft Office are exposed to remote code execution. An attacker could exploit this vulnerability when a user interacts with a malformed embedded OLE object within a Rich Text Format (RTF) file.
Windows XP Embedded Systems:- For additional information regarding security updates for embedded systems, refer to the following MSDN blog(s):
February 2007 Windows XP Embedded Updates Now Available on the ECE (KB918118)
- Consequence
- If a user is logged on with administrative user rights, an attacker who successfully exploits this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.
- Solution
-
Patch:
Following are links for downloading patches to fix the vulnerabilities:Microsoft Windows Server 2003 x64 Edition :
http://www.microsoft.com/downloads/details.aspx?FamilyId=3b6ee258-b636-455b-8833-74dea6269e24Microsoft Office 2000 Service Pack 3 :
http://www.microsoft.com/downloads/details.aspx?FamilyID=2FF67E78-2A08-45C9-A7AC-09678D060439Microsoft Office XP Service Pack 3 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=85C5162C-FC35-40B4-AD04-ADD247950423Microsoft Office 2003 Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=6C3BCAB8-0C99-4BE6-8DE7-71D463473A4AMicrosoft Windows 2000 Service Pack 4 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=0b0b13d3-b2fb-4cf4-8ee1-51871d39eecdMicrosoft Windows XP Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=3159428d-7212-4bf0-9699-3dbae5db6ca1Microsoft Windows XP Professional x64 Edition :
http://www.microsoft.com/downloads/details.aspx?FamilyId=daf2f7ac-20b4-4ec9-9467-2ddd4fc493d6Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=2e8d2355-d5c5-406d-9322-5fe1b2134d2fMicrosoft Windows Server 2003 for Itanium based Systems and Microsoft Windows Server 2003 with SP1 for Itanium based Systems :
http://www.microsoft.com/downloads/details.aspx?FamilyId=ed6dd20f-4c0b-48f7-a1f9-613265506835Microsoft Project 2000 Service Release 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=019B11FC-00B8-451C-AB3C-772780D4C46AMicrosoft Office 2000 Multilanguage Packs :
http://www.microsoft.com/downloads/details.aspx?FamilyID=B5A087F8-74D2-4184-9986-23AB3C4EF7F2Microsoft Project 2002 Service Pack 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=D162C366-C5E7-4850-B773-1FE669FAEEAFFor a complete list of patch download links, please refer to Micrsoft Security Bulletin MS07-013.
-
Microsoft Word Remote Code Execution Vulnerability (MS07-014)
- Severity
- Urgent 5
- Qualys ID
- 110052
- Vendor Reference
- MS07-014
- CVE Reference
- CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, CVE-2007-0208, CVE-2007-0209, CVE-2007-0515
- CVSS Scores
- Base 9.3 / Temporal 7.7
- Description
-
Microsoft update MS07-014 resolves several discovered vulnerabilities in Microsoft Word.
The following specific issues were reported. A remote code execution vulnerability exists:
- When Microsoft Word handles Word files with a specially crafted string or specially crafted data structure.
- When Microsoft Word parses a file and processes an unchecked count, a malformed drawing object or a malformed function.
Previously this was a Zero Day vulnerability.
- Consequence
- As a result, an attacker could take complete control of the target host.
- Solution
-
Patch:
Following are links for downloading patches to fix the vulnerabilities:Microsoft Office 2000 Service Pack 3 (Microsoft Word 2000 ):
http://www.microsoft.com/downloads/details.aspx?FamilyId=F1E61E6A-BE3D-4536-AF76-A11D5CE67199Microsoft Office XP Service Pack 3 (Microsoft Word 2002 ):
http://www.microsoft.com/downloads/details.aspx?FamilyId=A1CA8DD7-0622-4D66-A85F-A6586545EF9DMicrosoft Office 2003 Service Pack 2 (Microsoft Word 2003 ):
http://www.microsoft.com/downloads/details.aspx?FamilyID=882F8503-DA72-43C9-B556-A002EC58F289Microsoft Office 2003 Service Pack 2 (Microsoft Word Viewer 2003 ):
http://www.microsoft.com/downloads/details.aspx?FamilyId=FB59798B-AFE2-4103-9991-CBDD7686F9ADMicrosoft Works Suites (Microsoft Works Suite 2004 ):
http://www.microsoft.com/downloads/details.aspx?FamilyId=A1CA8DD7-0622-4D66-A85F-A6586545EF9DMicrosoft Works Suites (Microsoft Works Suite 2005 ):
http://www.microsoft.com/downloads/details.aspx?FamilyId=A1CA8DD7-0622-4D66-A85F-A6586545EF9DMicrosoft Works Suites (Microsoft Works Suite 2006 ):
http://www.microsoft.com/downloads/details.aspx?FamilyId=A1CA8DD7-0622-4D66-A85F-A6586545EF9DMicrosoft Office 2004 for Mac :
http://www.microsoft.com/mac/Refer to Micrsoft Security Bulletin MS07-014 for further details.
-
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (MS07-015)
- Severity
- Urgent 5
- Qualys ID
- 110053
- Vendor Reference
- MS07-015
- CVE Reference
- CVE-2006-3877, CVE-2007-0671
- CVSS Scores
- Base 9.3 / Temporal 7.7
- Description
-
Microsoft Office is prone to a remote code execution vulnerability.
This issue occurs when the application processes maliciously crafted files.
- Consequence
- An attacker who successfully exploits this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.
- Solution
-
Patch:
Following are links for downloading patches to fix the vulnerabilities:Microsoft Office 2000 Service Pack 3 :
http://www.microsoft.com/downloads/details.aspx?familyid=20E089E7-7DD3-44A4-ABFE-6D8C27721683Microsoft Office XP Service Pack 3 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=C54B1FDA-1237-48F7-AD19-F0830EE0E8FFMicrosoft Office 2003 Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=BB0973E7-275D-4491-9BA1-91EAEA84EEFDMicrosoft Project 2000 Service Release 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=3DF54B5C-CB82-4A99-9B90-EDAB38AD6310Microsoft Project 2002 Service Pack 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=419191DC-01B8-4E2A-BA5B-71BF3066C169Microsoft Visio 2002 Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=F50A5111-0926-4221-96DF-18294230ED1EMicrosoft Office 2004 for Mac :
http://www.microsoft.com/mac/Refer to Micrsoft Security Bulletin MS07-015 for further details.
-
Cumulative Security Update for Internet Explorer (MS07-016)
- Severity
- Urgent 5
- Qualys ID
- 100045
- Vendor Reference
- MS07-016
- CVE Reference
- CVE-2006-4697, CVE-2007-0217, CVE-2007-0219
- CVSS Scores
- Base 10 / Temporal 7.8
- Description
-
Multiple remote code execution vulnerabilities exist in Internet Explorer.
Windows XP Embedded Systems:- For additional information regarding security updates for embedded systems, refer to the following MSDN blog(s):
February 2007 Windows XP Embedded Updates Now Available on the ECE (KB928090)
- Consequence
- An attacker who successfully exploits these vulnerabilities could take complete control of an affected system.
- Solution
-
Patch:
Following are links for downloading patches to fix the vulnerabilities:Microsoft Internet Explorer 5.01 Service Pack 4 on Windows 2000 Service Pack 4 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=2D83EFCE-E507-4AFF-AB9B-EAF1D0D6320DMicrosoft Internet Explorer 6 Service Pack 1 when installed on Windows 2000 Service Pack 4 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=D9E4181A-05F9-4186-BDCA-C95351983844Microsoft Internet Explorer 6 for Windows XP Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=D4038DC1-8AF6-4BEA-82B8-EACCFF4CDB28Microsoft Internet Explorer 6 for Windows XP Professional x64 Edition :
http://www.microsoft.com/downloads/details.aspx?FamilyId=D6EEEA2C-785E-4DEF-913E-7F121556554FMicrosoft Internet Explorer 6 for Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=C6BCBE07-39C1-4705-A10D-019DA3F997E5Microsoft Internet Explorer 6 for Windows Server 2003 for Itanium based Systems and Windows Server 2003 with SP1 for Itanium based Systems :
http://www.microsoft.com/downloads/details.aspx?FamilyId=6476A14B-0D00-4F55-A438-E140E9D26849Microsoft Internet Explorer 6 for Windows Server 2003 x64 Edition :
http://www.microsoft.com/downloads/details.aspx?FamilyId=C18DB204-0F2C-4DD4-B29C-0938FF1BFD7BWindows Internet Explorer 7 for Windows XP Service Pack 2 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=EE851EFD-2CAF-41CE-A423-E1827DE318DFWindows Internet Explorer 7 for Windows XP Professional x64 Edition :
http://www.microsoft.com/downloads/details.aspx?FamilyId=AC084BBB-084D-47AC-BFDA-156E34A63817Windows Internet Explorer 7 for Windows Server 2003 Service Pack 1 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=36DAE010-AD1F-4E77-A353-9AFA41F065EAWindows Internet Explorer 7 for Windows Server 2003 with SP1 for Itanium based Systems :
http://www.microsoft.com/downloads/details.aspx?FamilyId=631B590D-98CE-440D-B588-88CC31BB9370For a complete list of patch download links, please refer to Micrsoft Security Bulletin MS07-016.
These new vulnerability checks are included in Qualys vulnerability signature 1.16.77-5. Each Qualys account is automatically updated with the latest vulnerability signatures as they become available. To view the vulnerability signature version in your account, from the Qualys Help menu, select the About tab.
Selective Scan Instructions Using Qualys
To perform a selective vulnerability scan, configure a scan profile to use the following options:
- Ensure access to TCP ports 135 and 139 are available.
- Enable Windows Authentication (specify Authentication Records).
-
Enable the following Qualys IDs:
- 90378
- 90379
- 90380
- 90384
- 90383
- 90385
- 90382
- 90381
- 110054
- 110052
- 110053
- 100045
- If you would like the scan to return the Windows Hostname, also include QID 82044 and ensure access to UDP port 137 is available.
- If you would like to be notified if Qualys is unable to log on to a host (if Authentication fails), also include QID 105015.
In addition, prior to running a scan for these new vulnerabilities, you can estimate your exposure to these new threats by running the Risk Analysis Report, available from the Qualys Vulnerability Management Reports tab.
Access for Qualys Customers
Platforms and Platform Identification
Technical Support
For more information, customers may contact Qualys Technical Support.
About Qualys
The Enterprise TruRisk Platform and its integrated suite of security and compliance applications provides organizations of all sizes with a global view of their security and compliance solutions, while drastically reducing their total cost of ownership. Qualys solutions include: continuous monitoring, vulnerability management, policy compliance, PCI compliance, security assessment questionnaire, web application scanning, web application firewall, malware detection and SECURE Seal for security testing of web sites.