• IDP Daily Update #1328
  posted: 12/12/08
  
• NSM Daily Update #1328
  posted: 12/12/08
  
• Deep Inspection 5.3r5 and above, 5.4, 6.0 #1328
  posted: 12/12/08
  
• Deep Inspection 5.1, 5.2, 5.3r4 and below #1321
  posted: 12/12/08
  
• Deep Inspection 5.0 #1132
  posted: 04/01/08
  
• Antivirus
  posted: 12/12/08

Text Size:        

• See Also
• Current Updates

• Microsoft Security Resources
• Security Incidents
• Security Resources

• Juniper Networks Product Solutions for Microsoft
• Get detailed information about Juniper solutions that protect your Microsoft environment:
• SSL VPNs
• Intrusion Prevention
• Firewall / VPN Central Management34 KB
• VPN Resiliency594 KB
• Denial of Service and Attack Prevention754 KB
• Antivirus Protection55 KB

June 2006

---

Prior Updates:

---

Login to learn more about how Juniper Networks products can protect you from these vulnerabilities. (If you don't already have a login, see Requesting Support.)

June 2006

Microsoft Security Bulletin MS06-021

Cumulative Security Update for Internet Explorer (916281)

Severity: Critical
Vulnerabilities:

• Exception Handling Memory Corruption Vulnerability - CVE-2006-2218
  A remote code execution vulnerability exists in the way Internet Explorer handles exceptional conditions. As a result, system memory may be corrupted in such a way that an attacker could execute arbitrary code if a user visited a specially crafted Web site. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
• HTML Decoding Memory Corruption Vulnerability - CVE-2006-2382
  A remote code execution vulnerability exists in the way Internet Explorer decodes specially crafted UTF-8 encoded HTML. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could potentially allow remote code execution if a user visited the specially crafted Web site. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
• ActiveX Control Memory Corruption Vulnerability - CVE-2006-2383
  A remote code execution vulnerability exists in the DXImageTransform.Microsoft.Light ActiveX control if passed unexpected data. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could potentially allow remote code execution if a user visited the specially crafted Web site. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
• COM Object Instantiation Memory Corruption Vulnerability - CVE-2006-1303
  A remote code execution vulnerability exists in the way Internet Explorer instantiates COM objects that are not intended to be instantiated in Internet Explorer. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could potentially allow remote code execution if a user visited the specially crafted Web site. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
• CSS Cross-Domain Information Disclosure Vulnerability - CVE-2005-4089
  An information disclosure vulnerability exists in Internet Explorer because it incorrectly interprets a specially crafted document as a cascading style sheet (CSS). An attacker could exploit the vulnerability by constructing a specially crafted Web page that could potentially lead to information disclosure if a user visited a specially crafted Web site or clicked a link in a specially crafted e-mail message. An attacker who successfully exploited this vulnerability could read file data from another Internet Explorer domain. However, user interaction is required to exploit this vulnerability.
• Address Bar Spoofing Vulnerability - CVE-2006-2384
  A spoofing vulnerability exists in Internet Explorer that could allow an attacker to display spoofed content in a browser window. The address bar and other parts of the trust UI can be displayed from trusted Web sites but the content of the window contains the attacker’s Web page.
• MHT Memory Corruption Vulnerability - CVE-2006-2385
  A remote code execution vulnerability exists in the way Internet Explorer saves multipart HTML (.mht) files. An attacker could exploit the vulnerability by constructing a specially crafted Web page and convince a user to save this Web page as a multipart HTML file that could potentially allow remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system however significant user interaction is required.
• Address Bar Spoofing Vulnerability - CVE-2006-1626
  A spoofing vulnerability exists in Internet Explorer that could allow an attacker to display spoofed content in a browser window. The address bar and other parts of the trust UI can be displayed from trusted Web sites but the content of the window contains the attacker’s Web page.

Microsoft Security Bulletin MS06-022

Vulnerability in ART Image Rendering Could Allow Remote Code Execution (918439)

Severity: Critical
Vulnerabilities:

• ART Image Rendering Vulnerability - CVE-2006-2378
  There is a remote code execution vulnerability in the way that Windows handles ART images. An attacker could exploit the vulnerability by constructing a specially crafted ART image that could potentially allow remote code execution if a user visited a Web site or viewed a specially crafted e-mail message. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

Microsoft Security Bulletin MS06-023

Vulnerability in Microsoft JScript Could Allow Remote Code Execution (917344)

Severity: Critical
Vulnerabilities:

• Microsoft JScript Memory Corruption Vulnerability - CVE-2006-1313
  There is a remote code execution vulnerability in JScript. An attacker could exploit the vulnerability by constructing specially crafted JScript that could potentially allow remote code execution if a user visited a Web site or viewed a specially crafted e-mail message. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

Microsoft Security Bulletin MS06-024

Vulnerability in Windows Media Player Could Allow Remote Code Execution (917734)

Severity: Critical
Vulnerabilities:

• Windows Media Player PNG Vulnerability - CVE-2006-0025
  A remote code execution vulnerability exists in Windows Media Player due to the way it handles the processing of PNG images. An attacker could exploit the vulnerability by constructing specially crafted Windows Media Player content that could potentially allow remote code execution if a user visits a malicious Web site or opens an email message with malicious content. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

Microsoft Security Bulletin MS06-025

Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280)

Severity: Critical
Vulnerabilities:

• RRAS Memory Corruption Vulnerability - CVE-2006-2370
  There is a remote code execution vulnerability in the Routing and Remote Access Service that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system.
• RASMAN Registry Corruption Vulnerability - CVE-2006-2371
  There is a remote code execution vulnerability in the Routing and Remote Access Service that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system.

Microsoft Security Bulletin MS06-026

Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution

Severity: Critical
Vulnerabilities:

• Graphics Rendering Vulnerability - CVE-2006-2376
  A remote code execution vulnerability exists in the Graphics Rendering Engine because of the way that it handles Windows Metafile (WMF) images. An attacker could exploit the vulnerability by constructing a specially crafted WMF image that could potentially allow remote code execution if a user visited a malicious Web site or opened a specially crafted attachment in e-mail. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

Microsoft Security Bulletin MS06-027

Vulnerability in Microsoft Word Could Allow Remote Code Execution (917336)

Severity: Critical
Vulnerabilities:

• Microsoft Word Malformed Object Pointer Vulnerability - CVE-2006-6492
  A remote code execution vulnerability exists in Word using a malformed object pointer. An attacker could exploit the vulnerability by constructing a specially crafted Word file that could allow remote code execution. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.

Microsoft Security Bulletin MS06-028

Vulnerability in Microsoft PowerPoint Could Allow Remote Code Execution (916768)

Severity: Critical
Vulnerabilities:

• Microsoft PowerPoint Remote Code Execution Using a Malformed Record Vulnerability - CVE-2006-0022
  There is a remote code execution vulnerability in PowerPoint that uses a malformed record. An attacker could exploit the vulnerability by constructing a specially crafted PowerPoint file that could allow remote code execution. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.

Microsoft Security Bulletin MS06-029

Vulnerability in Microsoft Exchange Server running Outlook Web Access Could Allow Code Execution (912442)

Severity: Moderate
Vulnerabilities:

• Microsoft Exchange Server when running Outlook Web Access Vulnerability - CVE-2006-0023
  A remote code execution vulnerability exists in Exchange Server running Outlook Web Access (OWA). An attacker could exploit the vulnerability by constructing a specially crafted script. If this specially crafted script is run, it would execute in the security context of the user. Attempts to exploit this vulnerability require user interaction. This vulnerability could allow an attacker access to any data on the Exchange Server running Outlook Web Access server that was accessible to the individual user.

Microsoft Security Bulletin MS06-030

Vulnerability in Server Message Block Could Allow Elevation of Privilege (914389)

Severity: Important
Vulnerabilities:

• SMB Driver Elevation of Privilege Vulnerability - CVE-2006-2373
  There is an elevation of privilege vulnerability in Server Message Block (SMB) that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system.
• SMB Invalid Handle Vulnerability - CVE-2006-2374
  There is denial of service vulnerability in Server Message Block (SMB) that could allow an attacker who successfully exploited this vulnerability to cause an affected system to stop responding.

Microsoft Security Bulletin MS06-031

Vulnerability in RPC Mutual Authentication Could Allow Spoofing (917736)

Severity: Moderate
Vulnerabilities:

• RPC Mutual Authentication Vulnerability - CVE-2006-2380
  There is a spoofing vulnerability in the way that RPC handles mutual authentication. This vulnerability could allow an attacker to persuade a user to connect to a malicious RPC resource which appears to be valid.

Microsoft Security Bulletin MS06-032

Vulnerability in TCP/IP Could Allow Remote Code Execution (917953)

Severity: Important
Vulnerabilities:

• IP Source Route Vulnerability - CVE-2006-2379
  There is a remote code execution vulnerability in the TCP/IP Protocol driver that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system.