Microsoft Windows Vulnerabilities

Systems Affected

• Microsoft Windows

Overview

Critical vulnerabilities in Macromedia Flash player may allow an attacker to take control of your computer.

Solution

Apply Update

Microsoft has provided an update to remedy these vulnerabilities. To obtain the update, visit the Microsoft Update web site. US-CERT also recommends enabling Automatic Updates.

Description

Some features of Macromedia products contain critical vulnerabilities. If an attacker can convince you to visit a malicious web site, the attacker may be able to take control of your computer or cause it to crash.

For more technical information, see US-CERT Technical Alert TA06-129A.

References

• Microsoft Security Bulletin Summary for May 2006 - <http://www.microsoft.com/technet/security/bulletin/ms06-may.mspx>
• US-CERT Cyber Security Alert SA06-075A - <http://www.us-cert.gov/cas/alerts/SA06-075A.html>
• US-CERT Vulnerability Note VU#303452 - <http://www.kb.cert.org/vuls/id/303452>
• US-CERT Vulnerability Note VU#945060 - <http://www.kb.cert.org/vuls/id/945060>
• US-CERT Vulnerability Note VU#146284 - <http://www.kb.cert.org/vuls/id/146284>
• CVE-2006-0027 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0027>
• CVE-2006-0024 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0024>
• CVE-2005-2628 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2628>
• Microsoft Update - <https://update.microsoft.com/microsoftupdate>

Feedback can be directed to the US-CERT Technical Staff.

Produced 2006 by US-CERT, a government organization. Terms of use

Revision History

May 9, 2006: Initial release