Microsoft Security Updates for Windows, Internet Explorer, and Adobe Flash

Systems Affected

• Microsoft Windows
• Microsoft Internet Explorer
• Adobe Flash

Overview

Vulnerabilities in Microsoft Windows, Internet Explorer, and Adobe Flash could allow an attacker to gain control of your computer.

Solution

Apply Update

Microsoft has provided updates to remedy these vulnerabilities. To obtain these updates, visit the Microsoft Update web site. US-CERT also recommends enabling Automatic Updates.

Description

Vulnerabilities in Microsoft Windows, Internet Explorer, and Adobe Flash may allow an attacker to access your computer, install and run malicious software on your computer, or cause it to crash. An attacker could exploit these vulnerabilities by using specially crafted network traffic, or by convincing you to view a specially crafted web site or HTML email message.

For more technical information, see US-CERT Technical Alert TA06-318A.

References

• US-CERT Technical Alert TA06-318A - <http://www.us-cert.gov/cas/techalerts/TA06-318A.html>
• US-CERT Vulnerability Notes for Microsoft November 2006 updates - <http://www.kb.cert.org/vuls/byid?searchview&query=ms06-nov>
• Securing Your Web Browser - <http://www.us-cert.gov/reading_room/securing_browser/>
• Using Caution with Email Attachments - <http://www.us-cert.gov/cas/tips/ST04-010.html>
• Microsoft Security Essentials - <http://www.microsoft.com/protect/>
• Microsoft security updates for November 2006 - <http://www.microsoft.com/athome/security/update/bulletins/200611.mspx>
• Microsoft Update - <https://update.microsoft.com/microsoftupdate/>
• Microsoft Automatic Updates - <http://www.microsoft.com/athome/security/update/msupdate_keep_current.mspx#EZB>

Feedback can be directed to US-CERT.

Produced 2006 by US-CERT, a government organization. Terms of use

Revision History

November 14, 2006: Initial release
December 12, 2006: Corrected typo in References