3 New Windows Security Bulletins for July, Many Systems Affected   7/12/2005 - 1,003 views, 1 Comment

Today’s Microsoft Security Bulletins deal with three things: a vulnerability in MS Word, a security hole in the Windows color management module, and an issue with the Windows Jview Profiler.

The issue with Microsoft Word is that there is a remote code execution vulnerability, meaning that if the hole is not patched, someone could take control of your computer from afar. Systems affected by this vulnerability include Windows XP SP3, Microsoft Office 2000, and Microsoft Works Suites.

The Windows color management vulnerability is an issue, according to the Microsoft site, “because of the way that it handles ICC profile format tag validation. An attacker could exploit the vulnerability by constructing a malicious image file that could potentially allow remote code execution if a user visited a malicious Web site or viewed a malicious e-mail message.” Got that? You can visit a poisoned image and the bad guy can take control of your computer.

The color management hole affects Windows 98 and 98SE, Windows XP SP1 and SP2, Windows 2000 SP4, and Windows Server 2003, among others.

The last in our trio of security bulletins today deals with the Windows Jview Profiler, and it affects most of the same versions of Windows as does the above color management issue. The problem here is that an attacker can take advantage of this vulnerability by creating a malicious web page - you visit the page and whammy! They can - you got it - take remote control of your computer.

To determine whether your own system is affected, and to get the patches, visit the following links:

Word vulnerability

Color management issue

Jview profiler vulnerability