Microsoft Windows Vulnerabilities

• Microsoft Windows

Critical vulnerabilities in Macromedia Flash player may allow an attacker to take control of your computer.

Solution

Apply Update

Microsoft has provided an update to remedy these vulnerabilities. To obtain the update, visit the Microsoft Update web site. US-CERT also recommends enabling Automatic Updates.

Some features of Macromedia products contain critical vulnerabilities. If an attacker can convince you to visit a malicious web site, the attacker may be able to take control of your computer or cause it to crash.

For more technical information, see US-CERT Technical Alert TA06-129A.

References

• Microsoft Security Bulletin Summary for May 2006 - <http://www.microsoft.com/technet/security/bulletin/ms06-may.mspx>
• US-CERT Cyber Security Alert SA06-075A - <http://www.us-cert.gov/cas/alerts/SA06-075A.html>
• US-CERT Vulnerability Note VU#303452 - <http://www.kb.cert.org/vuls/id/303452>
• US-CERT Vulnerability Note VU#945060 - <http://www.kb.cert.org/vuls/id/945060>
• US-CERT Vulnerability Note VU#146284 - <http://www.kb.cert.org/vuls/id/146284>
• CVE-2006-0027 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0027>
• CVE-2006-0024 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0024>
• CVE-2005-2628 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2628>
• Microsoft Update - <https://update.microsoft.com/microsoftupdate>

Feedback can be directed to the US-CERT Technical Staff.

Revision History

• May 9, 2006: Initial release
   

Last updated