Aggiornamento Alert GCSA-06093 - Vulnerabilita' in Microsoft Visual

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

          Alert ID : GCSA-06093
              Data : 13 Dicembre 2006
            Titolo : Vulnerabilita' in Microsoft Visual Studio 2005

******************************************************************


   E' stato rilasciato un aggiornamento che risolve la vulnerabilita'
   presente in Visual Studio 2005 relativa al controllo WMI
   Object Broker ActiveX (CVE-2006-4704), gia' affrontata nella
   precedente versione di questo alert.

   Applicare la patch associata al Bollettino Microsoft sulla sicurezza
   MS06-073
   http://www.microsoft.com/technet/security/bulletin/MS06-073.mspx


:: Riferimenti:

Bollettino Microsoft sulla sicurezza MS06-073
   Una vulnerabilit in Visual Studio 2005 potrebbe consentire l'
   esecuzione di codice in modalit remota (925674)
   http://www.microsoft.com/technet/security/bulletin/MS06-073.mspx

Microsoft Security Advisory (927709)
   http://www.microsoft.com/technet/security/advisory/927709.mspx

eEye ZDT - WMI Object Broker ActiveX
   http://research.eeye.com/html/alerts/zeroday/20061031.html

FrSIRT:
   http://www.frsirt.com/english/advisories/2006/4282

Secunia advisories:
   http://secunia.com/advisories/22603/

SecurityFocus - Microsoft Visual Studio 2005 WMI Object Broker Remote
   Code Execution Vulnerability
   http://www.securityfocus.com/bid/20843

US-CERT VU#854856 - WMI Object Broker ActiveX Control bypasses ActiveX
   security model
   http://www.kb.cert.org/vuls/id/854856

CVE Mitre:
   http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4704


-----BEGIN PGP SIGNATURE-----

iQCVAwUBRX/jOfOB+SpikaiRAQJjuQQA0l7TpGPwgX122+/lOjp+qw65w88x753l
KdmIpVbZMPG/2BSB45sRtKGY8VDoi9BJL3gsb+WiS3TDtV2RIUjoRULya91f8CPx
lr+nmfmqcvz6Eld+OPGRImBicT4glpBo7eBsBhPOyAr34hsW0blwZAYFNcAovK+8
/xGPa4EJcYA=
=pQSW
-----END PGP SIGNATURE-----