RETIRED: Microsoft October Advance Notification Multiple Vulnerabilities

Microsoft has released advance notification that the vendor will be releasing 11 security bulletins for Windows, Office, and .NET Framework on October 10, 2006. The highest severity rating for these issues is 'Critical'.

Further details about these issues are not currently available. Individual BIDs will be created for each issue and this record will be removed when the security bulletins are released.

These vulnerabilities have been assigned to the following BIDs:

20337 Microsoft ASP.NET AutoPostBack Variable Cross-Site Scripting Vulnerability
19030 Microsoft WebViewFolderIcon ActiveX Control Buffer Overflow Vulnerability
20304 Microsoft PowerPoint Object Pointer Remote Code Execution Vulnerability
20322 Microsoft PowerPoint Data Record Remote Code Execution Vulnerability
20325 Microsoft PowerPoint Record Improper Memory Access Remote Code Execution Vulnerability
20226 Microsoft PowerPoint Unspecified Remote Code Execution Vulnerability
20344 Microsoft Excel DATETIME Remote Code Execution Vulnerability
18872 Microsoft Excel Style Handling and Repair Remote Code Execution Vulnerability
20345 Microsoft Excel Lotus 1-2-3 File Handling Remote Code Execution Vulnerability
20391 Microsoft Excel COLINFO Remote Code Execution Vulnerability
20341 Microsoft Word Malformed String Remote Code Execution Vulnerability
20358 Microsoft Word Mail Merge Remote Code Execution Vulnerability
19835 Microsoft Word Malformed Stack Remote Code Execution Vulnerability
20387 Microsoft Word Mac Remote Code Execution Vulnerability
20339 Microsoft XML Core Services Information Disclosure Vulnerability
20338 Microsoft Windows XML Core Services XSLT Buffer Overrun Vulnerability
20382 Microsoft Office Improper Memory Access Remote Code Execution Vulnerability
20383 Microsoft Office Malformed Chart Record Remote Code Execution Vulnerability
20384 Microsoft Office Malformed Record Remote Code Execution Vulnerability
20320 Microsoft Office Smart Tag Remote Code Execution Vulnerability
19215 Microsoft Windows SMB PIPE Remote Denial of Service Vulnerability
20373 Microsoft Windows SMB Rename Remote Denial of Service Vulnerability
13124 Multiple Vendor TCP/IP Implementation ICMP Remote Denial Of Service Vulnerabilities
10183 Multiple Vendor TCP Sequence Number Approximation Vulnerability
13658 Microsoft IPv6 TCP/IP Loopback LAND Denial of Service Vulnerability
20318 Microsoft Windows Object Packager Remote Code Execution Vulnerability


 

Privacy Statement
Copyright 2010, SecurityFocus