|
*** Security Alert - 15th April 2005 ***
Source: US-CERT
Systems Affected: Microsoft Windows Systems
Description:
There are vulnerabilities in Microsoft Windows, Internet Explorer,
MSN Messenger, and Word that may allow an attacker to take control
of your computer or cause it to crash. To exploit some of these
vulnerabilities, an attacker may attempt to convince you to view a
malicious web page, image, or Word document.
Resolution:
Apply an update
Obtain the appropriate updates from Windows Update or by using
Automatic Updates. Microsoft has provided the patches for these
vulnerabilities in the Security Bulletins and on Windows Update.
Do not follow unsolicited links
Do not click on unsolicited links received in email, instant
messages, web forums, or chat rooms. While this is generally a good
security practice, following this behavior will not prevent the
exploitation of these vulnerabilities in all cases.
Maintain updated anti-virus software
Anti-virus software with updated virus definitions may identify and
prevent some exploit attempts. Ensure your anti-virus software is
updated with the latest virus definitions. If you do not have virus-protection
you can download AVG free for personal use from
Grisoft
<http://www.grisoft.com>.
References
* Microsoft Security Bulletin Summary for April, 2005 -
<http://www.microsoft.com/technet/security/bulletin/ms05-apr.mspx>
============================================
Copyright 2005 Carnegie Mellon University.
============================================
|
