From alerts@us-cert.gov Tue Mar 14 18:15:01 2006
From: US-CERT Alerts <alerts@us-cert.gov>
To: alerts@us-cert.gov
Date: Tue, 14 Mar 2006 18:05:58 -0500
Subject: US-CERT Cyber Security Alert SA06-073A -- Microsoft Office and Excel Vulnerabilities 


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



                        National Cyber Alert System

                      Cyber Security Alert SA06-073A


Microsoft Office and Excel Vulnerabilities

   Original release date: March 14, 2006
   Last revised: --
   Source: US-CERT


Systems Affected

     * Microsoft Office for Windows and Mac OS X
     * Microsoft Excel for Windows and Mac OS X
     * Microsoft Works Suite for Windows


Overview

     There are critical vulnerabilities in Microsoft Office and Excel
     that may allow an attacker to take control of your computer.


Solution

Apply Updates

     Microsoft has provided updates to remedy these vulnerabilities. To
     obtain the update, visit the Microsoft Update web site. US-CERT
     also recommends enabling Automatic Updates.


Description

     There are critical vulnerabilities in some features of Microsoft
     Office and Excel. If an attacker can convince you to open a
     malicious Office file, he or she may be able to take control of
     your computer or cause it to crash. Microsoft Security Bulletins
     for March 2006 provides updates that address these vulnerabilities.
     For more technical information, see US-CERT Technical Cyber
     Security Alert TA06-073A.


References

     * US-CERT Technical Cyber Security Alert TA06-073A.html -
       <http://www.us-cert.gov/cas/techalerts/TA06-073A.html>

     * US-CERT Vulnerability Note VU#339878 -
       <http://www.kb.cert.org/vuls/id/339878>

     * US-CERT Vulnerability Note VU#104302 -
       <http://www.kb.cert.org/vuls/id/104302>

     * US-CERT Vulnerability Note VU#123222 -
       <http://www.kb.cert.org/vuls/id/123222>

     * US-CERT Vulnerability Note VU#235774 -
       <http://www.kb.cert.org/vuls/id/235774>

     * US-CERT Vulnerability Note VU#642428 -
       <http://www.kb.cert.org/vuls/id/642428>

     * US-CERT Vulnerability Note VU#682820 -
       <http://www.kb.cert.org/vuls/id/682820>

     * Microsoft Security Bulletin Summary for March 2006 -
       <http://www.microsoft.com/technet/security/bulletin/ms06-mar.mspx>

     * Microsoft Update - <https://update.microsoft.com/microsoftupdate/>

     * Security Essentials -
       <http://www.microsoft.com/athome/security/protect/default.aspx>


 ____________________________________________________________________

   The most recent version of this document can be found at:

     <http://www.us-cert.gov/cas/alerts/SA06-073A.html>
 ____________________________________________________________________

   Feedback can be directed to US-CERT Technical Staff. Please send
   email to <cert@cert.org> with "SA06-073A Feedback VU#339878" in the
   subject.
 ____________________________________________________________________

   For instructions on subscribing to or unsubscribing from this
   mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
 ____________________________________________________________________

   Produced 2006 by US-CERT, a government organization.

   Terms of use:

     <http://www.us-cert.gov/legal.html>
 ____________________________________________________________________


Revision History

   Mar 14, 2006: Initial release


    
    
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iQEVAwUBRBdLxX0pj593lg50AQKYtQgAta5xSq8AlLjOJ3qG9uqL7tKNGC0skrib
mURNLJ0cLukq47PsemQ9WaX+UePWyGApMxUECC+di+xIkQKGl/oqwbusfiukbMiR
kAlha9cIcZ8YlM1T+nZUbWRRHFH1B62mnc80KnF9s3De8kMMAIXqSeOULHT2vpB1
qMAkcrvXeFAKPbNwtFQ8uynQ/rvQ+2vFnmrRu2SgqWM0dTcKOUEYQbwfiq5NaL+/
6Eh+Ff9iMG99lTIlzfuA3Tn8RwSb3+Pdi8bOrkj4v605yiLxD3H1XS1VRqTH91Pd
F0tYk0JHBzfM+Ao+2jtLjK80i/9N4NrtSA5tvKy0Q4eeb34emXLOSA==
=An5q
-----END PGP SIGNATURE-----