Darth Buddha
02-10-2004, 02:38 PM
Yet another flaw in Microsoft Operating Systems!
CRITICAL UPDATE: ASN.1 Vulnerability Could Allow Code Execution (828028)
Affected Systems:
Microsoft Windows NT 4.0 (all versions)
Microsoft Windows 2000 (SP3 and earlier)
Microsoft Windows XP (all versions)
Microsoft Windows Server 2003
Not Affected Software
Mac OS, Linux, Unix, OS2, Windows 9x, Windows ME
When should I apply this patch?
Immediately. Microsoft has identified this as a CRITICAL patch, their highest severity rating.
Where do I get this patch?
[list]Run Windows Update
Click "Start...Windows Update"
Open Internet Explorer, select "Tools...Windows update"
How can I schedule Windows Update to run automatically?
Download and run the Windows Update Tool from
http://software.brown.edu/dist/w-wupdcfg.html
What does this patch fix?
An attacker may create a buffer overflow, resulting in SYSTEM
level accesss
The attacker could be able to take any action on the system,
including installing programs, viewing data, changing data, deleting data, or creating new accounts with full privileges
Where can I read further details on this update?
At Microsoft's website,
<http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secu
rity/bulletin/MS04-007.asp>
CRITICAL UPDATE: ASN.1 Vulnerability Could Allow Code Execution (828028)
Affected Systems:
Microsoft Windows NT 4.0 (all versions)
Microsoft Windows 2000 (SP3 and earlier)
Microsoft Windows XP (all versions)
Microsoft Windows Server 2003
Not Affected Software
Mac OS, Linux, Unix, OS2, Windows 9x, Windows ME
When should I apply this patch?
Immediately. Microsoft has identified this as a CRITICAL patch, their highest severity rating.
Where do I get this patch?
[list]Run Windows Update
Click "Start...Windows Update"
Open Internet Explorer, select "Tools...Windows update"
How can I schedule Windows Update to run automatically?
Download and run the Windows Update Tool from
http://software.brown.edu/dist/w-wupdcfg.html
What does this patch fix?
An attacker may create a buffer overflow, resulting in SYSTEM
level accesss
The attacker could be able to take any action on the system,
including installing programs, viewing data, changing data, deleting data, or creating new accounts with full privileges
Where can I read further details on this update?
At Microsoft's website,
<http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secu
rity/bulletin/MS04-007.asp>