Windows: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution

Microsoft Security Bulletin MS05-053:

=====================
Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424)

Published: November 8, 2005

Summary

Who should read this document: Customers who use Microsoft Windows

Impact of Vulnerability: Remote Code Execution

Maximum Severity Rating: Critical

Recommendation: Customers should apply the update immediately.


Affected Software:
Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
Microsoft Windows XP Professional x64 Edition
Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
Microsoft Windows Server 2003 x64 Edition

Non-Affected Software:
Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME)

=====================

Apparently the patch is available via Windows Update as I have just obtained the critical update via Windows Update. Reboot is required after install.

Additional Source of Information:

US-CERT Technical Cyber Security Alert TA05-312A

 

Hi Mailman,

Thanks for the heads up.

As of now, not on the Catalog site yet: Windows Update > Admin options > Windows Catalog.

Regards - Charles