Microsoft Security Updates Galore

Wednesday, November 12 2003 @ 11:33 AM EST

Contributed by: logikal

A malicious attacker could remotely take over your Windows XP or Windows 2000 machine due to a buffer overrun in the Windows WorkStation Service.

A maliciously crafted Excel spreadsheet could bypass macro security settings entirely and execute its macros even when you have macros turned off and a specially crafted word document can execute code due to a buffer overrun in handling a piece of data being read.

A specially crafted web site or HTML email message can: execute its scripts in the "My Computer" zone (meaning have the same privileges as the user logged in on their machine) instead of the "Internet" zone in Internet Explorer; read arbitrary files on your computer and upload it to the attacker; and arbitrarily overwrite any files on your machine in Internet Explorer.

Comments (0)


Topsight.net
http://www.topsight.net/article.php/20031112113352401