[BigFix-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: EnterpriseSecurity

[autonotify at bigfix.com]

Fixlet Site - EnterpriseSecurity
Current Version: 677	Published: Fri, 06 Jan 2006 00:34:34 GMT


***************************************************************
Title: MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution - Windows Server 2003
Severity: Critical
Fixlet ID: 600101
Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS06-001.mspx

Fixlet Description: Microsoft has released a patch eliminating a remote code execution vulnerability in the Graphics Rendering Engine, relating to the way that it handles Windows Metafile (WMF) images. An attacker could exploit the vulnerability by constructing a specially crafted WMF image that could potentially allow remote code execution if a user visited a malicious Web site or opened a specially crafted attachment in e-mail. An attacker who successfully exploited this vulnerability could take complete control of an affected system.After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. 

***************************************************************
Title: MS06-001: CORRUPT PATCH - Windows Server 2003
Severity: Critical
Fixlet ID: 600102
Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS06-001.mspx


***************************************************************
Title: MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution - Windows XP SP1/SP2
Severity: Critical
Fixlet ID: 600103
Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS06-001.mspx

Fixlet Description: Microsoft has released a patch eliminating a remote code execution vulnerability in the Graphics Rendering Engine, relating to the way that it handles Windows Metafile (WMF) images. An attacker could exploit the vulnerability by constructing a specially crafted WMF image that could potentially allow remote code execution if a user visited a malicious Web site or opened a specially crafted attachment in e-mail. An attacker who successfully exploited this vulnerability could take complete control of an affected system. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. 

***************************************************************
Title: MS06-001: CORRUPT PATCH - Windows XP SP1/SP2
Severity: Critical
Fixlet ID: 600104
Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS06-001.mspx


***************************************************************
Title: MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution - Windows 2000 SP4
Severity: Critical
Fixlet ID: 600105
Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS06-001.mspx

Fixlet Description: Microsoft has released a patch eliminating a remote code execution vulnerability in the Graphics Rendering Engine, relating to the way that it handles Windows Metafile (WMF) images. An attacker could exploit the vulnerability by constructing a specially crafted WMF image that could potentially allow remote code execution if a user visited a malicious Web site or opened a specially crafted attachment in e-mail. An attacker who successfully exploited this vulnerability could take complete control of an affected system. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities. 

***************************************************************
Title: MS06-001: CORRUPT PATCH - Windows 2000 SP4
Severity: Critical
Fixlet ID: 600106
Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS06-001.mspx


***************************************************************
Title: MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution - Windows XP/2003 (x64)
Severity: Critical
Fixlet ID: 600107
Fixlet Link: http://www.microsoft.com/technet/security/bulletin/MS06-001.mspx

Fixlet Description:  Microsoft has released a patch eliminating a remote code execution vulnerability in the Graphics Rendering Engine, relating to the way that it handles Windows Metafile (WMF) images. An attacker could exploit the vulnerability by constructing a specially crafted WMF image that could potentially allow remote code execution if a user visited a malicious Web site or opened a specially crafted attachment in e-mail. An attacker who successfully exploited this vulnerability could take complete control of an affected system. After downloading and installing this patch, affected computers will no longer be susceptible to these vulnerabilities.