Microsoft Security Bulletin Summary for December, 2005

Microsoft® Windows® Malicious Software Removal Tool
(KB890830)

File Name: Windows-KB890830-V1.11-ENU.exe
Version: 1.11
Date Published: 12/13/2005
Language: English
Download Size: 1076 KB

Families Cleaned by Tool» | More Info & Download»

 

Microsoft Security Bulletin Summary for December, 2005
Published: December 13, 2005
Version: 1.0

Summary
Included in this advisory are updates for newly discovered vulnerabilities. These vulnerabilities, broken down by severity are:

• Critical (1)
  Cumulative Security Update for Internet Explorer (905915)
  Vulnerabilities exist in Internet Explorer, the most severe of these could allow an attacker to take complete control of an affected system.
• Important (1)
  Vulnerability in Windows Kernel Could Allow Elevation of Privilege (908523)
  A vulnerability exists in the Windows Kernel that could allow elevation of privileges on an affected system. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.

Security Bulletin Summary - December 2005»

 

Re: Microsoft Security Bulletin - Dec. 2005

This post courtesy Melissa Travers, quoting from:
http://www.dslreports.com/forum/remark,15012109

Microsoft Security Bulletin(s) for 12/13/2005

December 13, 2005
Today Microsoft released the following Security Bulletin(s).

Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.

Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.

Bulletin Summary:

http://www.microsoft.com/technet/security/Bulletin/ms05-Dec.mspx

Critical Bulletins:

Cumulative Security Update for Internet Explorer (905915)
http://www.microsoft.com/technet/security/Bulletin/ms05-054.mspx

Important Bulletins:

Vulnerability in Windows Kernel Could Allow Elevation of Privilege (908523)
http://www.microsoft.com/technet/security/Bulletin/ms05-055.mspx

Re-Released Bulletins:

Vulnerability in DirectShow Could Allow Remote Code Execution (904706)
http://www.microsoft.com/technet/security/Bulletin/ms05-050.mspx

This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.

If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety ( 1-866-727-2338 ). International customers should contact their local subsidiary.

 

Re: Microsoft Security Bulletin - Dec. 2005

Other Updates available at this time:

Update for Windows XP (KB835409)
http://www.microsoft.com/downloads/details...&displaylang=en

Update for Windows XP (KB910437)
http://www.microsoft.com/downloads/details...&displaylang=en

Update for Windows XP (KB908521)
http://www.microsoft.com/downloads/details...&displaylang=en

 

Microsoft Security Bulletin Minor Revisions - 12/13/2005

Microsoft Security Bulletin Minor Revisions
Vulnerability in Server Message Block Could Allow Remote Code Execution (885250)
Issued: December 13, 2005

Summary
=======
The following bulletins have undergone a minor revision increment.
Please see the appropriate bulletin for more details: MS05-011

Bulletin Information:
=====================

MS05-011
http://www.microsoft.com/technet/security/bulletin/ms05-011.mspx

Reason for Revision:
Bulletin revised to advise customers of the availability of Microsoft Knowledge Base Article 896427 which describes a potential issue that may be encountered after installing this update.

Originally posted: February 8, 2005
Updated: December 13, 2005
Bulletin Severity Rating: Critical
Version: 1.1

Support:
========
Technical support resources can be found at:
http://go.microsoft.com/fwlink/?LinkId=21131

 

Re: Microsoft Malicious Software Removal Tool - 12/13/2005

New detections have now been posted:

The following malicious software was added this release(12/13/05).

•IRCBot
•Ryknos
•F4IRootkit(Sony BMG)

http://www.microsoft.com/security/malwareremove/families.mspx