Alert: Microsoft Security Bulletin MS06-008 - Vulnerability in Web Client Service Could Allow Remote Code Execution (911927)

Microsoft Security Bulletin MS06-008:
Vulnerability in Web Client Service Could Allow Remote Code Execution
(911927)

Bulletin URL:
<http://www.microsoft.com/technet/security/Bulletin/MS06-008.mspx>

Version Number: 1.0
Issued Date: Tuesday, February 14, 2006
Impact of Vulnerability: Remote Code Execution
Maximum Severity Rating: Important
Patch(es) Replaced: None
Caveats: This bulletin replaces a prior security update. See the
frequently asked questions (FAQ) section of this bulletin for the
complete list.

Tested Software:
Affected Software:
------------------
* Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service
Pack 2
<http://tinyurl.com/d3d9h>
* Microsoft Windows XP Professional x64 Edition
<http://tinyurl.com/c77dg>
* Microsoft Windows Server 2003 and Microsoft Windows Server 2003
Service Pack 1
<http://tinyurl.com/aesle>
* Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft
Windows Server 2003 with SP1 for Itanium-based Systems
<http://tinyurl.com/dwj5z>
* Microsoft Windows Server 2003 x64 Edition Note The security updates
for Microsoft Windows Server 2003, Microsoft Windows Server 2003 Service
Pack 1, and Microsoft Windows Server 2003 x64 Edition also apply to
Microsoft Windows Server 2003 R2. Windows Server 2003 (all versions)
<http://tinyurl.com/apqo2>

Technical Description:
----------------------
* Web Client Vulnerability - CVE-2006-0013: A remote code execution
vulnerability exists in the way that Windows processes Web Client
requests that could allow an attacker who successfully exploited this
vulnerable to take complete control of the affected system.

This email is sent to NTBugtraq automagically as a service to my
subscribers. (v4.01.2194.14842)

Cheers,
Russ Cooper - Senior Scientist - Cybertrust/NTBugtraq Editor

--
NTBugtraq Editor's Note:

Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
--