Alert GCSA-06073 - Vulnerabilita' in Microsoft Publisher (MS06-054)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


*****************************************************************************

     Alert ID : GCSA-06073
         Data : 13 Settembre 2006
       Titolo : Vulnerabilita' in Microsoft Publisher (MS06-054)

*****************************************************************************

- - Descrizione del problema:

   E' stata individuata una vulnerabilita' in Microsoft Publisher
   nella gestione di documenti incorretti che potrebbe consentire
   ad un aggressore di far eseguire codice arbitrario su un sistema
   difettoso.


- - Piattaforme e Software interessati:

   Office Publisher 2000 (Microsoft Office 2000 Service Pack 3)
   Office Publisher 2002 (Microsoft Office XP Service Pack 3)
   Office Publisher 2003 (Microsoft Office 2003 Service Pack 1 e Service Pack 2)


- - Impatto:

   Esecuzione di codice arbitrario


- - Soluzioni:

   Applicare gli aggiornamenti rilasciati da Microsoft:

   (Inglese)
   http://www.microsoft.com/technet/security/bulletin/ms06-054.mspx
   (Italiano)
   http://www.microsoft.com/italy/technet/security/bulletin/ms06-054.mspx


- - Riferimenti:

   Microsoft Security Bulletin (Inglese):
   http://www.microsoft.com/technet/security/bulletin/ms06-054.mspx

   Microsoft Security Bulletin (Italiano):
   http://www.microsoft.com/italy/technet/security/bulletin/ms06-054.mspx

   Mitre's CVE ID:
   http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0001

   US-CERT:
   http://www.kb.cert.org/vuls/id/406236

   SecurityFocus Bugtraq ID:
   http://www.securityfocus.com/bid/19951

-----BEGIN PGP SIGNATURE-----

iQCVAwUBRQgkYvOB+SpikaiRAQL9wgQAz2ffiycnbJGsjyNEpqyJeLUhgamEkwli
4r2sOrlQtm18nkc2X3Wr92ZSVpBqTFjaTZbI+jDjyTd69LsPKC61fkJipLcqp6Zg
+U9WYY41QgqGOaH+GZL0nrCCh5OUmTRrqcTaZxLqbr1cFT0er3tp/oupTQnIFB2C
PtBWtNiiI/4=
=SAHW
-----END PGP SIGNATURE-----