• IDP Daily Update #1328
  posted: 12/12/08
  
• NSM Daily Update #1328
  posted: 12/12/08
  
• Deep Inspection 5.3r5 and above, 5.4, 6.0 #1328
  posted: 12/12/08
  
• Deep Inspection 5.1, 5.2, 5.3r4 and below #1321
  posted: 12/12/08
  
• Deep Inspection 5.0 #1132
  posted: 04/01/08
  
• Antivirus
  posted: 12/12/08

Text Size:        

• See Also
• Current Updates

• Microsoft Security Resources
• Security Incidents
• Security Resources

• Juniper Networks Product Solutions for Microsoft
• Get detailed information about Juniper solutions that protect your Microsoft environment:
• SSL VPNs
• Intrusion Prevention
• Firewall / VPN Central Management34 KB
• VPN Resiliency594 KB
• Denial of Service and Attack Prevention754 KB
• Antivirus Protection55 KB

July 2004

---

Prior Updates:

---

July 2004

Microsoft Security Bulletin MS04-018

Cumulative Security Update for Outlook Express (823353)

Severity: Moderate
Vulnerabilities:

• Malformed E-mail Header Vulnerability - CAN-2004-0215
  A denial of service vulnerability exists that could allow an attacker to send a specially crafted e-mail message causing Outlook Express to fail.

Microsoft Security Bulletin MS04-019

Vulnerability in Utility Manager Could Allow Code Execution (842526)

Severity: Important
Vulnerabilities:

• Utility Manager Vulnerability - CAN-2004-0213
  A privilege elevation vulnerability exists in the way that Utility Manager launches applications. A logged-on user could force Utility Manager to start an application with system privileges and could take complete control of the system.

Microsoft Security Bulletin MS04-020

Vulnerability in POSIX Could Allow Code Execution (841872)

Severity: Important
Vulnerabilities:

• Vulnerability in POSIX Could Allow Code Execution (841872)
  A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.

Microsoft Security Bulletin MS04-021

Security Update for IIS 4.0 (841373)

Severity: Important
Vulnerabilities:

• IIS Redirection Vulnerability - CAN-2004-0205
  A buffer overrun vulnerability exists in Internet Information Server 4.0 that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take complete control of the affected system.

Microsoft Security Bulletin MS04-022

Vulnerability in Task Scheduler Could Allow Code Execution (841873)

Severity: Critical
Vulnerabilities:

• Task Scheduler Vulnerability - CAN-2004-0212
  A remote code execution vulnerability exists in the Task Scheduler because of the way that it handles application name validation. There are many ways that a system could be vulnerable to this attack. An attacker who successfully exploited this vulnerability could take complete control of an affected system. However, user interaction is required to exploit this vulnerability.

Microsoft Security Bulletin MS04-023

Vulnerability in HTML Help Could Allow Code Execution (840315)

Severity: Critical
Vulnerabilities:

• showHelp Vulnerability - CAN-2003-1041
  A remote code execution vulnerability exists in the processing of a specially crafted showHelp URL. The vulnerability could allow malicious code to run in the Local Machine security zone in Internet Explorer, which could allow an attacker to take complete control of an affected system.
• HTML Help Vulnerability - CAN-2004-0201
  A remote code execution vulnerability exists in HTML Help that could allow remote code execution on an affected system. If a user is logged on with administrative privileges, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges

Microsoft Security Bulletin MS04-024

Vulnerability in Windows Shell Could Allow Remote Code Execution (839645)

Severity: Important
Vulnerabilities:

• Windows Shell Vulnerability - CAN-2004-0420
  A remote code execution vulnerability exists in the way that the Windows Shell launches applications. An attacker could exploit the vulnerability if a user visited a malicious Web site. If a user is logged on with administrative privileges, an attacker who successfully exploited this vulnerability could take complete control of an affected system. However, user interaction is required to exploit this vulnerability.

Microsoft Security Bulletin MS04-025

Cumulative Security Update for Internet Explorer (867801)

Severity: Critical
Vulnerabilities:

• Navigation Method Cross-Domain Vulnerability - CAN-2004-0549
  A remote code execution vulnerability exists in Internet Explorer because of the way that it handles navigation methods. An attacker could exploit the vulnerability by constructing a malicious web page that could potentially allow remote code execution if a user visited a malicious Web site. An attacker who successfully exploited this vulnerability could run malicious script code in the Local Machine security zone in Internet Explorer. If a user is logged on with administrative privileges, this could allow the attacker to take complete control of an affected system.
• Malformed BMP File Buffer Overrun Vulnerability - CAN-2004-0566
  A buffer overrun vulnerability exists in the processing of BMP image file formats that could allow remote code execution on an affected system. If the user is logged on with administrative privileges an attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges.
• Malformed GIF File Double Free Vulnerability - CAN-2003-1048
  A buffer overrun vulnerability exists in the processing of GIF image file formats that could allow remote code execution on an affected system. If the user is logged on with administrative privileges, an attacker who successfully exploited this vulnerability could take complete control of the affected system. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges.