Microsoft

(MS06-067) Cumulative Security Update for Internet Explorer (922760)

A remote malicious user can host the specially crafted Web site, or use a third-party host that caters to user-provided content.

(MS06-059) Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

When using vulnerable versions of Office, if a user were logged on with administrative user rights, an attacker who successfully exploited these vulnerabilities could take complete control of the client workstation. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

(MS06-060) Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (924554)

When using vulnerable versions of Office, if a user were logged on with administrative user rights, an attacker who successfully exploited these vulnerabilities could take complete control of the client workstation. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

(MS06-058) Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (924163)

When using vulnerable versions of PowerPoint, if a user were logged on with administrative user rights, an attacker who successfully exploited these vulnerabilities could take complete control of the system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

(MS06-062) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922581)

When using vulnerable versions of Office, if a user were logged on with administrative user rights, an attacker who successfully exploited these vulnerabilities could take complete control of the system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

(MS06-061) Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (924191)

If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

(MS06-065) Vulnerability in Windows Object Packager Could Allow Remote Execution (924496)

An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. However, significant user interaction is required to exploit this vulnerability.

(MS06-064) Vulnerabilities in TCP/IP IPv6 Could Allow Denial of Service (922819)

An attacker who successfully exploited the most severe of these vulnerabilities against an affected system could cause the system to stop responding or automatically reboot.

(MS06-063) Vulnerability in Server Service Could Allow Denial of Service (923414)

This update resolves publicly and privately reported vulnerabilities. The vulnerabilities are documented in the "Vulnerability Details" section of this bulletin.

(MS06-057) Vulnerability in Windows Explorer Could Allow Remote Execution (923191)

An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

(MS06-056) Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure (922770)

The vulnerability could allow an attacker to gain unauthorized access to information.

Vulnerability in PowerPoint Could Allow Remote Code Execution (925984)

(MS06-054) Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)

A remote malicious user could exploit this vulnerability when Publisher parses a file with a malformed string.

(MS06-053) Vulnerability in Indexing Service Could Allow Cross-Site Scripting (920685)

This update resolves a newly discovered, privately reported vulnerability.

(MS06-052) Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007)

here is a remote code execution vulnerability that could allow an attacker to send a specially crafted multicast message to an affected system and execute code on the affected system.