Aggiornamento Alert GCSA-06035 - Vulnerabilita' in Microsoft Excel

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************
         Alert ID: GCSA-06035
         Data: 12 luglio 2006
         Titolo: Vulnerabilita' in Microsoft Excel (MS06-037)
******************************************************************

Le seguenti informazioni integrano quanto gia' esposto nell'Alert GCSA-06035:

Microsoft ha pubblicato l'advisory (MS06-037) relativo alla vulnerabilta' in 
questione (CVE-2006-3059) e rilasciato gli aggiornamenti per correggere la 
stessa:

http://www.microsoft.com/technet/security/bulletin/ms06-037.mspx (Inglese)
http://www.microsoft.com/italy/technet/security/bulletin/ms06-037.mspx (Italiano)


Tale advisory corregge anche altre vulnerabilita' scoperte per Microsoft Excel:

1 - Vulnerabilita' relativa al record SELECTION non valido in Microsoft Excel (CVE-2006-1301)
2 - Vulnerabilita' relativa al record SELECTION non valido in Microsoft Excel (CVE-2006-1302)
3 - Vulnerabilita' relativa al record COLINFO non valido in Microsoft Excel (CVE-2006-1304)
4 - Vulnerabilita' relativa al record OBJECT non valido in Microsoft Excel (CVE-2006-1306)
5 - Vulnerabilita' relativa al valore FNGROUPCOUNT non valido in Microsoft Excel (CVE-2006-1308)
6 - Vulnerabilita' relativa al record LABEL non valido in Microsoft Excel (CVE-2006-1309)
7 - Vulnerabilita' relativa alla ricostruzione di file in Microsoft Excel (CVE-2006-2388)



- --  Riferimenti:

Microsoft Security Advisory (921365)
http://www.microsoft.com/technet/security/advisory/921365.mspx

Microsoft Security Bulletin MS06-037 (Inglese):
http://www.microsoft.com/technet/security/bulletin/ms06-037.mspx (Inglese)

Microsoft Security Bulletin MS06-037 (Italiano):
http://www.microsoft.com/italy/technet/security/bulletin/ms06-037.mspx (Italiano)

Mitre CVE:
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3059
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1301
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1302
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1304
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1306
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1308
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1309
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2388

-----BEGIN PGP SIGNATURE-----

iQCVAwUBRLTLV/OB+SpikaiRAQJvIgQAxH8qD8cD0TSkGvlfYz6biLXjtFIzWfTv
TDCC/8icBNvFxAU3ZHeXJNwoq1oKIPbTSmpcnyHOBf9cIDmoikmlSQcLccuAQL1g
1uZF6aGvTQGddqdR8lhgkh2oZoUwKSK5zwJqnDrlSqyZ8UlGBcygzHFTBYKNjx9A
6F54PoH6Hvc=
=SCf8
-----END PGP SIGNATURE-----