Microsoft Windows and Internet Explorer Vulnerabilities

Systems Affected

• Microsoft Windows
• Internet Explorer

Overview

Microsoft has released updates that address critical vulnerabilities in Windows and Internet Explorer.

Solution

Apply Updates

Microsoft has provided updates to remedy these vulnerabilities. To obtain the updates, visit the Microsoft Update web site. US-CERT also recommends enabling Automatic Updates.

Description

Microsoft Security Bulletins for April 2006 address vulnerabilities in Microsoft Windows and Internet Explorer. These vulnerabilities may allow an attacker to take control of your computer or cause it to crash.

For more technical information, see US-CERT Technical Alert TA06-101A.

References

• Microsoft Security Bulletin Summary for April 2006 - <http://www.microsoft.com/technet/security/bulletin/ms06-apr.mspx>
• Microsoft Update - <https://update.microsoft.com/microsoftupdate>
• US-CERT Vulnerability Note VU#876678 - <http://www.kb.cert.org/vuls/id/876678>
• US-CERT Vulnerability Note VU#984473 - <http://www.kb.cert.org/vuls/id/984473>
• US-CERT Vulnerability Note VU#434641 - <http://www.kb.cert.org/vuls/id/434641>
• US-CERT Vulnerability Note VU#503124 - <http://www.kb.cert.org/vuls/id/503124>
• US-CERT Vulnerability Note VU#959049 - <http://www.kb.cert.org/vuls/id/959049>
• US-CERT Vulnerability Note VU#824324 - <http://www.kb.cert.org/vuls/id/824324>
• US-CERT Vulnerability Note VU#341028 - <http://www.kb.cert.org/vuls/id/341028>
• US-CERT Vulnerability Note VU#234812 - <http://www.kb.cert.org/vuls/id/234812>
• US-CERT Vulnerability Note VU#641460 - <http://www.kb.cert.org/vuls/id/641460>
• Securing Your Web Browser - <http://www.us-cert.gov/reading_room/securing_browser/browser_security.html#Internet_Explorer>
• Improve the safety of your browsing and e-mail activities - <http://www.microsoft.com/athome/security/online/browsing_safety.mspx>
• Microsoft Security Essentials - <http://www.microsoft.com/athome/security/protect/chooseos.mspx>

Feedback can be directed to the US-CERT Technical Staff.

Produced 2006 by US-CERT, a government organization. Terms of use

Revision History

April 11, 2006: Initial release