Aggiornamento Alert GCSA-06077 - Vulnerabilita' in Microsoft Windows

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

         Alert ID : GCSA-06077
             Data : 10 Ottobre 2006
           Titolo : Vulnerabilita' in Microsoft Windows (MS06-057)

******************************************************************

E' stato rilasciato il Bollettino di Sicurezza Microsoft (MS06-057)
per risolvere la vulnerabilita' critica Windows Shell Remote Code Execution
(CVE-2006-3730), legata all'esecuzione del metodo "setSlice()" nel controllo
ActiveX "WebViewFolderIcon" (webvw.dll).

La patch di sicurezza coinvolge i seguenti sistemi:

   Microsoft Windows 2000 Service Pack 4
   Microsoft Windows XP Service Pack 1
   Microsoft Windows XP Service Pack 2
   Microsoft Windows XP Professional x64 Edition
   Microsoft Windows Server 2003,
   Microsoft Windows Server 2003 Service Pack 1
   Microsoft Windows Server 2003 for Itanium-based Systems
   Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
   Microsoft Windows Server 2003 x64 Edition


Riferimenti:

Microsoft Security Bulletin MS06-057
   http://www.microsoft.com/technet/security/bulletin/ms06-057.mspx

Microsoft Security Advisory (926043)
   http://www.microsoft.com/technet/security/advisory/926043.mspx

CVE Mitre:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3730

HD Moore:
   http://browserfun.blogspot.com/2006/07/mobb-18-webviewfoldericon-setslice.html

Secunia:
   http://secunia.com/advisories/22159/

US-CERT:
   http://www.kb.cert.org/vuls/id/753044

Security Focus:
   http://www.securityfocus.com/bid/19030

-----BEGIN PGP SIGNATURE-----

iQCVAwUBRSzJ5fOB+SpikaiRAQJPGgQA03w1Z7w0+8MX+BwW6G2OEEk1tRkaXgZt
08qIkxMfizUBcHuf7BxirbOXGYp39k3EpWOFjqiQQiWV/ML93/FXVY0VxxII6R68
g+7Pnuv5ve9aWPgsEiiiRdKLLwQlQnhRnwlsVpIXIgqVJwBrrPkwcWeQggptBqUW
lxuO7eyWOFg=
=Lg+a
-----END PGP SIGNATURE-----