Aggiornamento Alert GCSA-06078 - Vulnerabilita' Multiple in Microsoft

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

         Alert ID : GCSA-06078
             Data : 10 Ottobre 2006
           Titolo : Vulnerabilita' Multiple in Microsoft PowerPoint (MS06-058)

******************************************************************

E' stato rilasciato il Bollettino di Sicurezza Microsoft (MS06-058)
per risolvere la vulnerabilita' critica:

- - PowerPoint Malformed Record Vulnerability (CVE-2006-4694)
   relativa ad un errore nel trattamento di documenti PowerPoint
   contenenti una stringa non valida;

e le seguenti nuove vulnerabilita':

- - PowerPoint Malformed Object Pointer Vulnerability (CVE-2006-3435)
   relativa ad un errore nel trattamento di documenti PowerPoint
   contenenti puntatori a oggetto non validi

- - PowerPoint Malformed Data Record Vulnerability (CVE-2006-3876)
   relativa ad un errore nel trattamento di documenti PowerPoint
   contenenti un data record non valido

- - PowerPoint Malformed Record Memory Corruption Vulnerability (CVE-2006-3877)
   relativa ad un errore nel trattamento di documenti PowerPoint
   contenenti un record non valido


L'impatto di tali vulnerabilita' sul sistema e' di tipo Remote Code Execution.


La patch si applica ai seguenti sistemi:

   Microsoft PowerPoint 2000
   Microsoft PowerPoint 2002
   Microsoft PowerPoint 2003
   Microsoft Excel 2004 for Mac
   Microsoft Excel v.X for Mac


Riferimenti:

Microsoft Security Bulletin MS06-058
   Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution
   (924163)
   http://www.microsoft.com/technet/security/bulletin/ms06-058.mspx

Microsoft Security Advisory (925984)
   Vulnerability in PowerPoint Could Allow Remote Code Execution
   http://www.microsoft.com/technet/security/advisory/925984.mspx

US-CERT VU#231204:
   http://www.kb.cert.org/vuls/id/231204

Secunia:
   http://secunia.com/advisories/22127/

CVE Mitre:
   http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4694
   http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3435
   http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3876
   http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3877
-----BEGIN PGP SIGNATURE-----

iQCVAwUBRSzKrvOB+SpikaiRAQLjPAP/SBHzVdyurn/rnxxOe/NoxodYaH3al8jm
dDonzEdce4IhWuzdGwcqdgr9G97bF+gful/Beev4zk4hO+cU77FyRzRAZ2FEEtKx
SFdI4BeFWUN+fkHYtJ74Z3KK+s0/DTqMkueqmL/n9h9ApihLKsVsIXP63o+HtMuG
ZhE6hH/eZM0=
=Ew2Z
-----END PGP SIGNATURE-----