| SANS Top-20 Internet Security Attack Targets: Microsoft Office Attacks (2/2) | |||
|
|||
| Microsoft Office Attacks |
W3.2 Operating Systems Affected Windows 9x, Windows 2000, Windows XP, Windows 2003 are all vulnerable depending on the version of Office software installed. W3.3 CVE Entries CVE-2006-5296, CVE-2006-4694, CVE-2006-4534, CVE-2006-3649, CVE-2006-3590, CVE-2006-3059, CVE-2006-2492, CVE-2006-1540, CVE-2006-1301, CVE-2006-0002 W3.4 How to Determine If You Are at Risk The MS Office installations running without the patches referenced in the Microsoft Bulletins listed from the NVD entries are vulnerable. Use any vulnerability scanner to check whether your systems are patched against these vulnerabilities. You can also consider using the Microsoft Windows Server Update Services (WSUS), Microsoft Baseline Security Analyzer (MBSA), Windows Live Scanner or Systems Management Server (SMS) to check the security patch status of your systems. W3.5 How to Protect against the Microsoft Office Vulnerabilities
W3.6 References Microsoft Office zero-day Discussions http://blogs.technet.com/msrc/archive/2006/10/12/poc-published-for-ms-office-2003-powerpoint.aspx http://blogs.securiteam.com/?p=508 http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-081616-2104-99 http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FMDROPPER%2EBI&VSect=T http://blogs.securiteam.com/?p=451 http://www.symantec.com/security_response/writeup.jsp?docid=2006-051911-0706-99 http://www.symantec.com/security_response/writeup.jsp?docid=2006-051914-5151-99 |
| Page: 1 2 |
| Return to Category | Return To Main Index |
| SANS Top-20 Internet Security Attack Targets: Microsoft Office Attacks (2/2) |