• IDP Daily Update #1312
  posted: 11/18/08
  
• NSM Daily Update #1312
  posted: 11/18/08
  
• Deep Inspection 5.3r5 and above, 5.4, 6.0 #1312
  posted: 11/18/08
  
• Deep Inspection 5.1, 5.2, 5.3r4 and below #1300
  posted: 11/18/08
  
• Deep Inspection 5.0 #1132
  posted: 04/01/08
  
• Antivirus
  posted: 11/17/08

Text Size:        

• See Also
• Current Updates

• Microsoft Security Resources
• Security Incidents
• Security Resources

• Juniper Networks Product Solutions for Microsoft
• Get detailed information about Juniper solutions that protect your Microsoft environment:
• SSL VPNs
• Intrusion Prevention
• Firewall / VPN Central Management34 KB
• VPN Resiliency594 KB
• Denial of Service and Attack Prevention754 KB
• Antivirus Protection55 KB

April 2008

---

Prior Updates:

---

Login to learn more about how Juniper Networks products can protect you from these vulnerabilities. (If you don't already have a login, see Requesting Support.)

April 2008

Microsoft Security Bulletin MS08-018

Vulnerability in Microsoft Project Could Allow Remote Code Execution (950183)

Severity: Critical
Vulnerabilities:

• Project Memory Validation Vulnerability - CVE-2008-1088
  A remote code execution vulnerability exists in the way Microsoft Project handles specially crafted Project files. An attacker could exploit the vulnerability by sending a malformed file which could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site. If a user were logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.

Microsoft Security Bulletin MS08-019

Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (949032)

Severity: Important
Vulnerabilities:

• Visio Object Header Vulnerability CVE-2008-1089
  A remote code execution vulnerability exists in the way Microsoft Visio validates object header data in specially crafted Visio files. An attacker could exploit the vulnerability by sending a malformed file which could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site. If a user were logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.
• Visio Memory Validation Vulnerability - CVE-2008-1090
  A remote code execution vulnerability exists in the way Microsoft Visio validates memory allocations when loading specially-crafted Visio files from disk into memory. An attacker could exploit the vulnerability by sending a malformed file which could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site. If a user were logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.

Microsoft Security Bulletin MS08-020

Vulnerability in DNS Client Could Allow Spoofing (945553)

Severity: Important
Vulnerabilities:

• DNS Spoofing Attack Vulnerability – CVE-2008-0087
  A spoofing vulnerability exists in Windows DNS clients. The vulnerability could allow an unauthenticated attacker to send malicious responses to DNS requests made by vulnerable clients, thereby spoofing or redirecting Internet traffic from legitimate locations.

Microsoft Security Bulletin MS08-021

Vulnerability in GDI Could Allow Remote Code Execution (948590)

Severity: Critical
Vulnerabilities:

• GDI Heap Overflow Vulnerability - CVE-2008-1083
  A remote code execution vulnerability exists in the way that GDI handles integer calculations. The vulnerability could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts.
• GDI Stack Overflow Vulnerability - CVE-2008-1087
  A remote code execution vulnerability exists in the way that GDI handles filename parameters in EMF files. The vulnerability could allow remote code execution if a user opens a specially crafted EMF image file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts.

Microsoft Security Bulletin MS08-022

Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338)

Severity: Critical
Vulnerabilities:

• VBScript/JScript Remote Code Execution Vulnerability - CVE-2008-0083
  A remote code execution vulnerability exists in the way that the VBScript and JScript scripting engines decode script in Web pages. This vulnerability could allow remote code execution if a user opened a specially crafted file or visited a Web site that is running specially crafted script. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Microsoft Security Bulletin MS08-023

Security Update of ActiveX Killbits (948881)

Severity: Critical
Vulnerabilities:

• ActiveX Object Memory Corruption Vulnerability - CVE-2008-1086
  A remote code execution vulnerability exists in the component hxvz.dll. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user

Microsoft Security Bulletin MS08-024

Cumulative Security Update for Internet Explorer (947864)

Severity: Critical
Vulnerabilities:

• Data Stream Handling Memory Corruption Vulnerability - CVE-2008-1085
  A remote code execution vulnerability exists in Internet Explorer because of the way that it processes data streams. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user.

Microsoft Security Bulletin MS08-025

Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

Severity: Important
Vulnerabilities:

• Windows Kernel Vulnerability - CVE-2008-1084
  An elevation of privilege vulnerability exists due to the Windows kernel improperly validating input passed from usermode to the Kernel. The vulnerability could allow an attacker to run code with elevated privileges. An attacker who successfully exploited this vulnerability could execute arbitrary code and take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.