Redbeard's Place...MS Security 2006

Win 95/98/ME/NT/2000/XP
Microsoft Security Bulletin Center - 2006

Subscribe to the Microsoft Security Notification Service

Microsoft Security Bulletin MS06-001
Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME) – Review the FAQ section of this bulletin for details about these operating systems.

• Note: The security updates for Microsoft Windows Server 2003, Microsoft Windows Server 2003 Service Pack 1, and Microsoft Windows Server 2003 x64 Edition also apply to Microsoft Windows Server 2003 R2.
Microsoft Security Bulletin MS06-002
Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution (908519)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME) – Review the FAQ section of this bulletin for details about these operating systems.
Microsoft Security Bulletin MS06-003
Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution (902412)

Affected Software:
• Microsoft Office 2000 Service Pack 3

Microsoft Office 2000 Software:
• Microsoft Outlook 2000
• Microsoft Office 2000 MultiLanguage Packs
• Microsoft Outlook 2000 English MultiLanguage Packs

Microsoft Office XP Software:
• Microsoft Outlook 2002
• Microsoft Office XP Multilingual User Interface Packs

(Note: Multilingual User Interface Packs are for non- English packages.)

• Microsoft Office 2003 Service Pack 1 and Service Pack 2

Microsoft Office 2003 Software:
• Microsoft Outlook 2003
• Microsoft Office 2003 Multilingual User Interface Packs
• Microsoft Office 2003 Language Interface Packs

(Note: Multilingual User Interface Packs are for non- English packages)

• Microsoft Exchange Server
• Microsoft Exchange Server 5.0 Service Pack 2
• Microsoft Exchange Server 5.5 Service Pack 4
• Microsoft Exchange 2000 Server Pack 3 with the Exchange 2000 Post-Service Pack 3 Update Rollup of August 2004 >

NON Affected Software:
• Microsoft Exchange Server 2003 Service Pack 1
• Microsoft Exchange Server 2003 Service Pack 2

Microsoft Security Bulletin MS06-004

Cumulative Security Update for Internet Explorer (910620)

Affected Software:
• Microsoft Windows 2000 Service Pack 4

NON Affected Software:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with Service Pack 1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition family
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME)
– Review the FAQ section of this bulletin for details about these operating systems.

Affected Components:
• Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4

Microsoft Security Bulletin MS06-005

Vulnerability in Windows Media Player Could Allow Remote Code Execution (911565)

Affected Software:
• Windows Media Player for XP on Microsoft Windows XP Service Pack 1
• Windows Media Player 9 on Microsoft Windows XP Service Pack 2
• Windows Media Player 9 on Microsoft Windows Server 2003
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME)
– Review the FAQ section of this bulletin for details about these operating systems.

NON Affected Software:
• Windows Media Player 6.4 on all Microsoft Windows operating systems
• Windows Media Player 10 on Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Affected Components:
• Microsoft Windows Media Player 7.1 when installed on Windows 2000 Service Pack 4
• Microsoft Windows Media Player 9 when installed on Windows 2000 Service Pack 4 or Windows XP Service Pack 1
• Microsoft Windows Media Player 10 when installed on Windows XP Service Pack 1 or Windows XP Service Pack 2

Microsoft Security Bulletin MS06-006

Vulnerability in Windows Media Player Plug-in with Non-Microsoft Internet Browsers Could Allow Remote Code Execution (911564)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME)

Microsoft Security Bulletin MS06-007

Vulnerability in TCP/IP Could Allow Denial of Service (913446)

Affected Software:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME)

Microsoft Security Bulletin MS06-008

Vulnerability in Web Client Service Could Allow Remote Code Execution (911927)

Affected Software:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME)

Microsoft Security Bulletin MS06-009

Microsoft Security Bulletin MS06-010

Vulnerability in PowerPoint 2000 Could Allow Information Disclosure (889167)

Affected Software:
• Microsoft Office 2000 Service Pack 3
    • PowerPoint 2000

NON Affected Software:
• Microsoft Office XP Service Pack 3
    • PowerPoint 2002
• Microsoft Office 2003 Service Pack 1 or Service Pack 2
    • PowerPoint 2003

Microsoft Security Bulletin MS06-011

Permissive Windows Services DACLs Could Allow Elevation of Privilege (914798)

Affected Software:
• Microsoft Windows XP Service Pack 1
• Microsoft Windows Server 2003
• Microsoft Windows Server 2003 for Itanium-based Systems

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME)
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 with Service Pack 1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-012

Microsoft Security Bulletin MS06-013

Cumulative Security Update for Internet Explorer (912812)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with Service Pack 1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition family
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME) – Review the FAQ section of this bulletin for details about these operating systems.

Note: The security updates for Microsoft Windows Server 2003, Microsoft Windows Server 2003 Service Pack 1, and Microsoft Windows Server 2003 x64 Edition also apply to Microsoft Windows Server 2003 R2.

Affected Components:
• Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4
• Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4 or on Microsoft Windows XP Service Pack 1
• Internet Explorer 6 for Microsoft Windows XP Service Pack 2
• Internet Explorer 6 for Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Internet Explorer 6 for Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Internet Explorer 6 for Microsoft Windows Server 2003 x64 Edition
• Internet Explorer 6 for Microsoft Windows XP Professional x64 Edition
• Internet Explorer 6 Service Pack 1 on Microsoft Windows 98, on Microsoft Windows 98 SE, or on Microsoft Windows Millennium Edition – Review the FAQ section of this bulletin for details about this version.

Microsoft Security Bulletin MS06-014

Microsoft Security Bulletin MS06-018

Vulnerability in Microsoft Distributed Transaction Coordinator Could Allow Denial of Service (913580)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows Server 2003
• Microsoft Windows Server 2003 for Itanium-based Systems

NON Affected Software:
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 x64 Edition
• Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

Microsoft Security Bulletin MS06-019

Vulnerability in Microsoft Exchange Could Allow Remote Code Execution (916803)

Affected Software:
• Microsoft Exchange Server 2000 with the Exchange 2000 Post-Service Pack 3 Update Rollup of August 2004(870540)
• Microsoft Exchange Server 2003 Service Pack 1
• Microsoft Exchange Server 2003 Service Pack 2

Microsoft Security Bulletin MS06-020

Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (913433)

Affected Software:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME)

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Windows XP Professional x64 Edition

Microsoft Security Bulletin MS06-021

Cumulative Security Update for Internet Explorer (916281)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

Affected Components:
• Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4
• Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4 or on Microsoft Windows XP Service Pack 1
• Internet Explorer 6 for Microsoft Windows XP Service Pack 2
• Internet Explorer 6 for Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Internet Explorer 6 for Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Internet Explorer 6 for Microsoft Windows Server 2003 x64 Edition
• Internet Explorer 6 for Microsoft Windows XP Professional x64 Edition
• Internet Explorer 6 Service Pack 1 on Microsoft Windows 98, on Microsoft Windows 98 SE, or on Microsoft Windows Millennium Edition

Microsoft Security Bulletin MS06-022

Vulnerability in ART Image Rendering Could Allow Remote Code Execution (918439)

Affected Software:
• Microsoft Windows XP Service Pack 1
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

Affected Components:
• Windows 2000 with the Windows 2000 AOL Image Support Update installed:
• Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4
• Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4

Microsoft Security Bulletin MS06-023

Microsoft Security Bulletin MS06-025

Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON-Affected Components:
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

Microsoft Security Bulletin MS06-026

Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280)

Affected Software:
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

NON-Affected Components:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-027

Microsoft Security Bulletin MS06-028

Vulnerability in Microsoft PowerPoint Could Allow Remote Code Execution (916768)

Affected Software:
• Microsoft Office 2000 Service Pack 3:
    • Microsoft PowerPoint 2000 (KB916520)

• Microsoft Office XP Service Pack 3:
    • Microsoft PowerPoint 2002 (KB916519)

• Microsoft Office 2003 Service Pack 1 or Service Pack 2:
    • Microsoft PowerPoint 2003 (KB916518)

• Microsoft Office 2004 for Mac
    • Microsoft PowerPoint 2004 for Mac (KB918963)

• Microsoft Office v. X for Mac:
    • Microsoft PowerPoint v. X for Mac (KB918963)

Microsoft Security Bulletin MS06-029

Vulnerability in Microsoft Exchange Server Running Outlook Web Access Could Allow Script Injection (912442)

Affected Software:
• Microsoft Exchange 2000 Server Pack 3 with the August 2004 Exchange 2000 Server Post-Service Pack 3 Update Rollup (KB912442)
• Microsoft Exchange Server 2003 Service Pack 1 (KB912442)
• Microsoft Exchange Server 2003 Service Pack 2 (KB912442)

Microsoft Security Bulletin MS06-030

Vulnerability in Server Message Block Could Allow Elevation of Privilege (914389)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON-Affected Components:
• Microsoft Word v. X for Mac
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

Microsoft Security Bulletin MS06-031

Vulnerability in RPC Mutual Authentication Could Allow Spoofing (917736)

Affected Software:
• Microsoft Windows 2000 Service Pack 4

NON-Affected Components:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

Microsoft Security Bulletin MS06-032

Vulnerability in TCP/IP Could Allow Remote Code Execution (917953)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON-Affected Components:
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

Microsoft Security Bulletin MS06-033

Microsoft Security Bulletin MS06-034

Vulnerability in Microsoft Internet Information Services using Active Server Pages Could Allow Remote Code Execution (917537)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Professional Service Pack 1 and Microsoft Windows XP Professional Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with Service Pack 1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition family

NON Affected Software:
• Microsoft Windows XP Home Service Pack 1
• Microsoft Windows XP Home Service Pack 2

Affected Components:
• Microsoft Internet Information Services (IIS) 6.0
• Microsoft Internet Information Services (IIS) 5.1
• Microsoft Internet Information Services (IIS) 5.0

Microsoft Security Bulletin MS06-035

Vulnerability in Server Service Could Allow Remote Code Execution (917159)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

Microsoft Security Bulletin MS06-036

Vulnerability in DHCP Client Service Could Allow Remote Code Execution (914388)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)

Microsoft Security Bulletin MS06-037

Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)

Affected Software:
• Microsoft Office 2003 Service Pack 1 or Service Pack 2
    • Microsoft Excel 2003 (KB918419)
    • Microsoft Excel Viewer 2003 (KB918425)

• Microsoft Office XP Service Pack 3
    • Microsoft Excel 2002 (KB918420)

• Microsoft Office 2000 Service Pack 3
    • Microsoft Excel 2000 (KB918424)

• Microsoft Office 2004 for Mac
    • Microsoft Excel 2004 for Mac (KB921213)

• Microsoft Office v. X for Mac
    • Microsoft Excel v. X for Mac

Microsoft Security Bulletin MS06-038

Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (917284)

Affected Software:
• Microsoft Office 2003 Service Pack 1 or Service Pack 2 (KB917151)
    • Microsoft Access 2003
    • Microsoft Excel 2003
    • Microsoft Excel 2003 Viewer
    • Microsoft FrontPage 2003
    • Microsoft InfoPath 2003
    • Microsoft OneNote 2003
    • Microsoft Outlook 2003
    • Microsoft PowerPoint 2003
    • Microsoft Project 2003
    • Microsoft Publisher 2003
    • Microsoft Visio 2003
    • Microsoft Word 2003
    • Microsoft Word 2003 Viewer

• Microsoft Office XP Service Pack 3 (KB917150)
    • Microsoft Access 2002
    • Microsoft Excel 2002
    • Microsoft FrontPage 2002
    • Microsoft Outlook 2002
    • Microsoft PowerPoint 2002
    • Microsoft Publisher 2002
    • Microsoft Visio 2002
    • Microsoft Word 2002

• Microsoft Office 2000 Service Pack 3 (KB917152)
    • Microsoft Access 2000
    • Microsoft Excel 2000
    • Microsoft FrontPage 2000
    • Microsoft Outlook 2000
    • Microsoft PowerPoint 2000
    • Microsoft Publisher 2000
    • Microsoft Word 2000

• Microsoft Project 2002 Service Pack 1 (KB917150)
• Microsoft Visio 2002 Service Pack 2 (KB917150)
• Microsoft Project 2000 Service Release 1 (KB917152)
• Microsoft Office 2004 for Mac
• Microsoft Office v. X for Mac

NON Affected Software:
• Microsoft Works Suites:
    • Microsoft Works Suite 2004
    • Microsoft Works Suite 2005
    • Microsoft Works Suite 2006

Microsoft Security Bulletin MS06-039

Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (915384)

Affected Software:
• Microsoft Office 2003 Service Pack 1 or Service Pack 2 (KB914455)
    • Microsoft Project 2003
    • OneNote 2003

• Microsoft Office XP Service Pack 3 (KB914796)
• Microsoft Office 2000 Service Pack 3 (KB914797)
• Microsoft Project 2002 (KB920102)
• Microsoft Project 2000 (KB920101)

• Microsoft Works Suites:
    • Microsoft Works Suite 2004 (KB914796) (same as the Microsoft Office XP update)
    • Microsoft Works Suite 2005 (KB914796) (same as the Microsoft Office XP update)
    • Microsoft Works Suite 2006 (KB914796) (same as the Microsoft Office XP update)

NON Affected Software:
• Microsoft Office Viewers
• Microsoft Office 2004 for Mac
• Microsoft Office v. X for Mac

Microsoft Security Bulletin MS06-040
Vulnerability in Server Service Could Allow Remote Code Execution (921883)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-041
Vulnerabilities in DNS Resolution Could Allow Remote Code Execution (920683)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-042
Cumulative Security Update for Internet Explorer (918899)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Affected Components:
• Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4
• Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4 or on Microsoft Windows XP Service Pack 1
• Internet Explorer 6 for Microsoft Windows XP Service Pack 2
• Internet Explorer 6 for Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Internet Explorer 6 for Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Internet Explorer 6 for Microsoft Windows Server 2003 x64 Edition
• Internet Explorer 6 for Microsoft Windows XP Professional x64 Edition

Microsoft Security Bulletin MS06-043
Vulnerability in Microsoft Windows Could Allow Remote Code Execution (920214)

Affected Software:
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1
• Microsoft Windows Server 2003
• Microsoft Windows Server 2003 for Itanium-based Systems

Affected Components:
Outlook Express 6 on Microsoft Windows XP Service Pack 2
• Outlook Express 6 on Microsoft Windows XP Professional x64 Edition
• Outlook Express 6 on Microsoft Windows Server 2003 Service Pack 1
• Outlook Express 6 on Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Outlook Express 6 on Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-044
Vulnerability in Microsoft Management Console Could Allow Remote Code Execution (917008)

Affected Software:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2

NON Affected Software:
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-045
Vulnerability in Windows Explorer Could Allow Remote Code Execution (921398)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-046
Vulnerability in HTML Help Could Allow Remote Code Execution (922616)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-047
Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (921645)

Affected Software:
• Microsoft Office 2000 Service Pack 3 — (KB920822)
• Microsoft Project 2000 Service Release 1 — (KB920822)
• Microsoft Access 2000 Runtime Service Pack 3 — (KB920822)
• Microsoft Office XP Service Pack 3 — (KB920821)
• Microsoft Project 2002 Service Pack 1 — (KB920821)
• Microsoft Visio 2002 Service Pack 2 — (KB920821)

• Microsoft Works Suites:
    • Microsoft Works Suite 2004 — (KB920821) (same as the Microsoft Office XP update)
    • Microsoft Works Suite 2005 — (KB920821) (same as the Microsoft Office XP update)
    • Microsoft Works Suite 2006 — (KB920821) (same as the Microsoft Office XP update)

• Microsoft Visual Basic for Applications SDK 6.0 — (KB923167)
• Microsoft Visual Basic for Applications SDK 6.2 — (KB923167)
• Microsoft Visual Basic for Applications SDK 6.3 — (KB923167)
• Microsoft Visual Basic for Applications SDK 6.4

NON Affected Software:
• Microsoft Office 2003 Service Pack 1 and Microsoft Office 2003 Service Pack 2

Microsoft Security Bulletin MS06-048
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922968)

Affected Software:
• Microsoft Office 2000 Service Pack 3 - (KB921568)
    • Microsoft PowerPoint 2000

• Microsoft Office XP Service Pack 3 - (KB921567)
    • Microsoft PowerPoint 2002

• Microsoft Office 2003 Service Pack 1 or Service Pack 2 - (KB921566)
    • Microsoft Office PowerPoint 2003

• Microsoft Office 2004 for Mac - (KB923151)
    • PowerPoint 2004 for Mac

• Microsoft Office v. X for Mac - (KB923148)
    • PowerPoint 2004 v. X for Mac

NON Affected Software:
• Microsoft PowerPoint 2003 Viewer

• Microsoft Works Suites:
    • Microsoft Works Suite 2004
    • Microsoft Works Suite 2005
    • Microsoft Works Suite 2006

Microsoft Security Bulletin MS06-049
Vulnerability in Windows Kernel Could Result in Elevation of Privilege (920958)

Affected Software:
• Microsoft Windows 2000 Service Pack 4

NON Affected Software:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-050
Vulnerabilities in Microsoft Windows Hyperlink Object Library Could Allow Remote Code Execution (920670)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-051
Vulnerability in Windows Kernel Could Result in Remote Code Execution (917422)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-052
Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007)

Affected Software:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-053
Vulnerability in Indexing Service Could Allow Cross-Site Scripting (920685)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Affected Components:
• Indexing Service

Microsoft Security Bulletin MS06-054
Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)

Affected Software:
• Microsoft Office 2000 Service Pack 3 (KB894540)
    • Office Publisher 2000

• Microsoft Office XP Service Pack 3 (KB894541)
    • Office Publisher 2002

• Microsoft Office 2003 Service Pack 1 and Service Pack 2 (KB894542)
    • Office Publisher 2003

Microsoft Security Bulletin MS06-055
Vulnerability in Vector Markup Language Could Allow Remote Code Execution (925486)

Affected Software:
• Microsoft Windows XP Service Pack 1
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Affected Components:
• Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4
• Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4

Microsoft Security Bulletin MS06-056
Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure (922770)

Affected Software:
Microsoft .NET Framework 2.0 for the following operating system versions:

• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 or Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows XP Tablet PC Edition
• Microsoft Windows XP Media Center Edition
• Microsoft Windows Server 2003 or Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems or Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Microsoft .NET Framework 1.0
• Microsoft .NET Framework 1.1

Affected Components:
• Microsoft .NET Framework 2.0

Microsoft Security Bulletin MS06-057
Vulnerability in Windows Explorer Could Allow Remote Execution (923191)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-058
Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (924163)

Affected Software:
Microsoft Office 2000 Service Pack 3(KB923093)
    • Microsoft PowerPoint 2000

Microsoft Office XP Service Pack 3 (KB923092)
    • Microsoft PowerPoint 2002

Microsoft Office 2003 Service Pack 1 or Service Pack 2 (KB923091)
    • Microsoft Office PowerPoint 2003
    • Microsoft Office 2004 for Mac

Microsoft PowerPoint 2004 for Mac (KB924999)
    • Microsoft Office v. X for Mac
    • Microsoft PowerPoint v. X for Mac

NON Affected Software:
• Microsoft PowerPoint 2003 Viewer

Microsoft Security Bulletin MS06-059
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

Affected Software:
Microsoft Office 2000 Service Pack 3
    • Microsoft Excel 2000 — (KB923090)

Microsoft Office XP Service Pack 3
    • Microsoft Excel 2002 — (KB923089)

Microsoft Office 2003 Service Pack 1 or Service Pack 2
    • Microsoft Office Excel 2003 — (KB923088)
    • Microsoft Office Excel Viewer 2003 - (KB923088)

Microsoft Office 2004 for Mac
    • Microsoft Excel 2004 for Mac - (KB924999)

Microsoft Office v. X for Mac
    • Microsoft Excel v. X for Mac - (KB924998)

Microsoft Works Suites:
    • Microsoft Works Suite 2004 - (KB923089) (same as the Microsoft Excel 2002 update)
    • Microsoft Works Suite 2005 - (KB923089) (same as the Microsoft Excel 2002 update)
    • Microsoft Works Suite 2006 - (KB923089) (same as the Microsoft Excel 2002 update)

Microsoft Security Bulletin MS06-060
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

Affected Software:
Microsoft Office 2000 Service Pack 3 - (KB920910)
    • Microsoft Word 2000

Microsoft Office XP Service Pack 3 - (KB920817)
    • Microsoft Word 2002

Microsoft Office 2003 Service Pack 1 or Service Pack 2 - (KB923094)
    • Microsoft Office Word 2003
    • Microsoft Office Word 2003 Viewer - (KB923276)

Microsoft Works Suites:
    • Microsoft Works Suite 2004 - (KB920817) (same as the Microsoft Word 2002 update)
    • Microsoft Works Suite 2005 - (KB920817) (same as the Microsoft Word 2002 update)
    • Microsoft Works Suite 2006 - (KB920817) (same as the Microsoft Word 2002 update)

Microsoft Office 2004 for Mac - (KB924999)
Microsoft Office v. X for Mac - (KB924998)

Microsoft Security Bulletin MS06-061
Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (924191)

Affected Software:
• Microsoft XML Parser 2.6 (all versions) and Microsoft XML Core Services 3.0 (all versions) on Windows 2000 Service Pack 4 - (KB924191)
• Microsoft XML Parser 2.6 (all versions) and Microsoft XML Core Services 3.0 (all versions) on Microsoft Windows XP Service Pack 1 - (KB924191)
• Microsoft XML Parser 2.6 (all versions) and Microsoft XML Core Services 3.0 (all versions) on Microsoft Windows XP Service Pack 2 – (KB924191)
• Microsoft XML Parser 2.6 (all versions) and Microsoft XML Core Services 3.0 (all versions) on Microsoft Windows XP Professional x64 Edition – (KB924191)
• Microsoft XML Parser 2.6 (all versions) and Microsoft XML Core Services 3.0 (all versions) on Microsoft Windows Server 2003 - (KB924191)
• Microsoft XML Parser 2.6 (all versions) and Microsoft XML Core Services 3.0 (all versions) on Microsoft Windows Server 2003 Service Pack 1 – (KB924191)
• Microsoft XML Parser 2.6 (all versions) and Microsoft XML Core Services 3.0 (all versions) on Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems – (KB924191)
• Microsoft XML Parser 2.6 (all versions) and Microsoft XML Core Services 3.0 (all versions) on Microsoft Windows Server 2003 x64 Edition – (KB924191)
• Microsoft Office 2003 Service Pack 1 or Service Pack 2 with Microsoft XML Core Services 5.0 Service Pack 1 - (KB924424)

NON Affected Software:
• Windows 2000 Service Pack 4 running Microsoft XML Core Services 2.5
• Microsoft Windows XP Service Pack 1 running Microsoft XML Core Services 2.5
• Microsoft Windows XP Service Pack 2 running Microsoft XML Core Services 2.5
• Microsoft Windows Server 2003 running Microsoft XML Core Services 2.5
• Microsoft Windows Server 2003 Service Pack 1 running Microsoft XML Core Services 2.5

Affected Components:
• Microsoft XML Core Services 4.0 when installed on Windows 2000 Service Pack 4 – (KB925672)
• Microsoft XML Core Services 4.0 when installed on Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 – (KB925672)
• Microsoft XML Core Services 4.0 when installed on Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 – (KB925672)
• Microsoft XML Core Services 6.0 when installed on Windows 2000 Service Pack 4 – (KB925673)
• Microsoft XML Core Services 6.0 when installed on Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 – (KB925673)
• Microsoft XML Core Services 6.0 when installed on Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 – (KB925673)

Microsoft Security Bulletin MS06-062
Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922581)

Affected Software:
Microsoft Office 2000 Service Pack 3 - (KB923274)
    • Microsoft Access 2000
    • Microsoft Excel 2000
    • Microsoft FrontPage 2000
    • Microsoft Outlook 2000
    • Microsoft PowerPoint 2000
    • Microsoft Publisher 2000
    • Microsoft Word 2000

Microsoft Office XP Service Pack 3 - (KB923273)
    • Microsoft Access 2002
    • Microsoft Excel 2002
    • Microsoft FrontPage 2002
    • Microsoft Outlook 2002
    • Microsoft PowerPoint 2002
    • Microsoft Publisher 2002
    • Microsoft Visio 2002
    • Microsoft Word 2002

Microsoft Office 2003 Service Pack 1 or Service Pack 2 - (KB923272)
    • Microsoft Access 2003
    • Microsoft Excel 2003
    • Microsoft Excel 2003 Viewer
    • Microsoft FrontPage 2003
    • Microsoft InfoPath 2003
    • Microsoft OneNote 2003
    • Microsoft Outlook 2003
    • Microsoft PowerPoint 2003
    • Microsoft Project 2003
    • Microsoft Publisher 2003
    • Microsoft Visio 2003
    • Microsoft Word 2003
    • Microsoft Word 2003 Viewer

• Microsoft Project 2000 Service Release 1 - (KB923274)
• Microsoft Project 2002 Service Pack 1 - (KB923273)
• Microsoft Visio 2002 Service Pack 2 - (KB923273)
• Microsoft Office 2004 for Mac - (KB924999)
• Microsoft Office v. X for Mac - (KB924998)

NON Affected Software:
• Microsoft PowerPoint 2003 Viewer

Microsoft Works Suites:
    • Microsoft Works Suite 2004
    • Microsoft Works Suite 2005
    • Microsoft Works Suite 2006

Microsoft Security Bulletin MS06-063
Vulnerability in Server Service Could Allow Denial of Service and Remote Code Execution (923414)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

Microsoft Security Bulletin MS06-064
Vulnerabilities in TCP/IP IPv6 Could Allow Denial of Service (922819)

Affected Software:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4

Microsoft Security Bulletin MS06-065
Vulnerability in Windows Object Packager Could Allow Remote Execution (924496)

Affected Software:
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4

Microsoft Security Bulletin MS06-066
Vulnerabilities in Client Service for NetWare Could Allow Remote Code Execution (923980)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 2
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1

NON Affected Software:
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Windows Vista

Microsoft Security Bulletin MS06-067
Cumulative Security Update for Internet Explorer (922760)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Windows Vista

Affected Components:
• Microsoft Internet Explorer 5.01 Service Pack 4 on Windows 2000 Service Pack 4
• Microsoft Internet Explorer 6 Service Pack 1 on Windows 2000 Service Pack 4
• Microsoft Internet Explorer 6 for Windows XP Service Pack 2
• Microsoft Internet Explorer 6 for Windows XP Professional x64 Edition
• Microsoft Internet Explorer 6 for Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Internet Explorer 6 for Windows Server 2003 for Itanium-based Systems and Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Internet Explorer 6 for Windows Server 2003 x64 Edition

NON Affected Software:
• Windows Internet Explorer 7 for Windows XP Service Pack 2
• Windows Internet Explorer 7 for Windows XP Professional x64 Edition
• Windows Internet Explorer 7 for Windows Server 2003 Service Pack 1
• Windows Internet Explorer 7 for Windows Server 2003 with SP1 for Itanium-based Systems
• Windows Internet Explorer 7 for Windows Server 2003 x64 Edition
• Windows Internet Explorer 7 in Windows Vista

Microsoft Security Bulletin MS06-068
Vulnerability in Microsoft Agent Could Allow Remote Code Execution (920213)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Windows Vista

Microsoft Security Bulletin MS06-069
Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (923789)

Affected Software:
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Windows Vista

Microsoft Security Bulletin MS06-070
Vulnerability in Workstation Service Could Allow Remote Code Execution (924270)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 2

NON Affected Software:
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Windows Vista

Microsoft Security Bulletin MS06-071
Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (928088)

Affected Components:
• Microsoft XML Core Services 4.0 when installed on Windows (all versions)-(KB927978)
• Microsoft XML Core Services 6.0 when installed on Windows (all versions)-(KB927977)

NON Affected Software:
• Microsoft XML Core Services 3.0
• Microsoft XML Core Services 5.0

Microsoft Security Bulletin MS06-072
Cumulative Security Update for Internet Explorer (925454)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Windows Vista

Affected Components:
• Microsoft Internet Explorer 5.01 Service Pack 4 on Windows 2000 Service Pack 4
• Microsoft Internet Explorer 6 Service Pack 1 on Windows 2000 Service Pack 4
• Microsoft Internet Explorer 6 for Windows XP Service Pack 2
• Microsoft Internet Explorer 6 for Windows XP Professional x64 Edition
• Microsoft Internet Explorer 6 for Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Internet Explorer 6 for Windows Server 2003 for Itanium-based Systems and Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Internet Explorer 6 for Windows Server 2003 x64 Edition

NON Affected Software:
• Windows Internet Explorer 7 for Windows XP Service Pack 2
• Windows Internet Explorer 7 for Windows XP Professional x64 Edition
• Windows Internet Explorer 7 for Windows Server 2003 Service Pack 1
• Windows Internet Explorer 7 for Windows Server 2003 with SP1 for Itanium-based Systems
• Windows Internet Explorer 7 for Windows Server 2003 x64 Edition
• Windows Internet Explorer 7 in Windows Vista

Microsoft Security Bulletin MS06-073
Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution (925674)

Affected Software:
• Microsoft Visual Studio 2005
    • Visual Studio 2005 Standard Edition
    • Visual Studio 2005 Professional Edition
    • Visual Studio 2005 Team Suite
    • Visual Studio 2005 Team Edition for Developers
    • Visual Studio 2005 Team Edition for Architects
    • Visual Studio 2005 Team Edition for Testers

NON Affected Software:
• Microsoft Visual Studio 2005
    • Visual Basic 2005 Express Edition
    • Visual C++ 2005 Express Edition
    • Visual C# Express Edition
    • Visual J# Express Edition
    • Visual Web Developer Express Edition
    • Visual Studio 2005 Tools For Office
    • Visual Studio 2005 Team Explorer
    • Visual Studio 2005 Team Foundation Dual-Server
    • Visual Studio 2005 Team Foundation Single Server
    • Visual Studio 2005 Team Foundation Proxy
    • Visual Studio 2005 Team Foundation Build
    • Visual Studio 2005 Premier Partner Edition
• Microsoft Visual Studio 6.0 Service Pack 6
• Microsoft Visual Studio .NET 2002 Service Pack 1
• Microsoft Visual Studio .NET 2003 Service Pack 1

Microsoft Security Bulletin MS06-074
Vulnerability in SNMP Could Allow Remote Code Execution (926247)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Windows Vista

Microsoft Security Bulletin MS06-075
Vulnerability in Windows Could Allow Elevation of Privilege (926255)

Affected Software:
• Microsoft Windows XP Service Pack 2
• Microsoft Windows Server 2003
• Microsoft Windows Server 2003 for Itanium-based Systems

NON Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 with Service Pack 1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Windows Vista

Microsoft Security Bulletin MS06-076
Cumulative Security Update for Outlook Express (923694)

Affected Software:
• Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition

NON Affected Software:
• Windows Vista

Affected Components:
• Outlook Express 5.5 Service Pack 2 on Microsoft Windows 2000 Service Pack 4
• Outlook Express 6 Service Pack 1 when installed on Microsoft Windows 2000 Service Pack 4
• Outlook Express 6 on Microsoft Windows XP Service Pack 2
• Outlook Express 6 on Microsoft Windows XP Professional x64 Edition
• Outlook Express 6 on Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Outlook Express 6 on Microsoft Windows Server 2003 x64 Edition
• Outlook Express 6 on Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems

Microsoft Security Bulletin MS06-077
Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)

Affected Software:
• Microsoft Windows 2000 Service Pack 4

NON Affected Software:
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
• Microsoft Windows Server 2003 x64 Edition
• Windows Vista

Microsoft Security Bulletin MS06-078
Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689)

Affected Software:
• Microsoft Windows Media Format 7.1 through 9.5 Series Runtime on the following operating system versions:
    • Microsoft Windows 2000 Service Pack 4 (KB923689)
    • Microsoft Windows XP Service Pack 2 (KB923689)
    • Microsoft Windows XP Professional x64 Edition (KB923689)
    • Microsoft Windows Server 2003 or Microsoft Windows Server 2003 Service Pack 1 (KB923689)
    • Microsoft Windows Server 2003 x64 Edition (KB923689)

• Microsoft Windows Media Format 9.5 Series Runtime x64 Edition on the following operating system versions:
    • Microsoft Windows XP Professional x64 Edition (KB923689)
    • Microsoft Windows Server 2003 x64 Edition (KB923689)

• Microsoft Windows Media Player 6.4
    • Windows 2000 Service Pack 4 (KB925398)
    • Microsoft Windows XP Service Pack 2 (KB925398)
    • Microsoft Windows XP Professional x64 Edition (KB925398)
    • Microsoft Windows Server 2003 or on Microsoft Windows Server 2003 Service Pack 1 (KB925398)
    • Microsoft Windows Server 2003 x64 Edition (KB925398)

NON Affected Software:
• Windows Vista
• Microsoft Windows 2003 For Itanium-Based Systems and Windows Server 2003 with SP1 for Itanium-based Systems
• Windows Media Format 11 Series when installed on all Microsoft Operating Systems

GOTO:   Microsoft Security Bulletin Center - 2000
GOTO:   Microsoft Security Bulletin Center - 2001
GOTO:   Microsoft Security Bulletin Center - 2002
GOTO:   Microsoft Security Bulletin Center - 2003
GOTO:   Microsoft Security Bulletin Center - 2004
GOTO:   Microsoft Security Bulletin Center - 2005
GOTO:   Microsoft Security Bulletin Center - 2007
GOTO:   Microsoft Security Bulletin Center - 2008

Subscribe to the Microsoft Security Notification Service

Microsoft Security Bulletin MS06-001

Microsoft Security Bulletin MS06-002

Microsoft Security Bulletin MS06-003

Microsoft Security Bulletin MS06-004

Microsoft Security Bulletin MS06-005

Microsoft Security Bulletin MS06-006

Microsoft Security Bulletin MS06-007

Microsoft Security Bulletin MS06-008

Microsoft Security Bulletin MS06-009

Microsoft Security Bulletin MS06-010

Microsoft Security Bulletin MS06-011

Microsoft Security Bulletin MS06-012

Microsoft Security Bulletin MS06-013

Microsoft Security Bulletin MS06-014

Microsoft Security Bulletin MS06-015

Microsoft Security Bulletin MS06-016

Microsoft Security Bulletin MS06-017

Microsoft Security Bulletin MS06-018

Microsoft Security Bulletin MS06-019

Microsoft Security Bulletin MS06-020

Microsoft Security Bulletin MS06-021

Microsoft Security Bulletin MS06-022

Microsoft Security Bulletin MS06-023

Microsoft Security Bulletin MS06-025

Microsoft Security Bulletin MS06-026

Microsoft Security Bulletin MS06-027

Microsoft Security Bulletin MS06-028

Microsoft Security Bulletin MS06-029

Microsoft Security Bulletin MS06-030

Microsoft Security Bulletin MS06-031

Microsoft Security Bulletin MS06-032

Microsoft Security Bulletin MS06-033

Microsoft Security Bulletin MS06-034

Microsoft Security Bulletin MS06-035

Microsoft Security Bulletin MS06-036

Microsoft Security Bulletin MS06-037

Microsoft Security Bulletin MS06-038

Microsoft Security Bulletin MS06-039

Microsoft Security Bulletin MS06-040

Microsoft Security Bulletin MS06-041

Microsoft Security Bulletin MS06-042

Microsoft Security Bulletin MS06-043

Microsoft Security Bulletin MS06-044

Microsoft Security Bulletin MS06-045

Microsoft Security Bulletin MS06-046

Microsoft Security Bulletin MS06-047

Microsoft Security Bulletin MS06-048

Microsoft Security Bulletin MS06-049

Microsoft Security Bulletin MS06-050

Microsoft Security Bulletin MS06-051

Microsoft Security Bulletin MS06-052

Microsoft Security Bulletin MS06-053

Microsoft Security Bulletin MS06-054

Microsoft Security Bulletin MS06-055

Microsoft Security Bulletin MS06-056

Microsoft Security Bulletin MS06-057

Microsoft Security Bulletin MS06-058

Microsoft Security Bulletin MS06-059

Microsoft Security Bulletin MS06-060

Microsoft Security Bulletin MS06-061

Microsoft Security Bulletin MS06-062

Microsoft Security Bulletin MS06-063

Microsoft Security Bulletin MS06-064

Microsoft Security Bulletin MS06-065

Microsoft Security Bulletin MS06-066

Microsoft Security Bulletin MS06-067

Microsoft Security Bulletin MS06-068

Microsoft Security Bulletin MS06-069

Microsoft Security Bulletin MS06-070

Microsoft Security Bulletin MS06-071

Microsoft Security Bulletin MS06-072

Microsoft Security Bulletin MS06-073

Microsoft Security Bulletin MS06-074

Microsoft Security Bulletin MS06-075

Microsoft Security Bulletin MS06-076

Microsoft Security Bulletin MS06-077

Microsoft Security Bulletin MS06-078