• IDP Daily Update #1164
  posted: 05/09/08
  
• NSM Daily Update #1164
  posted: 05/09/08
  
• Deep Inspection 5.3r5 and above, 5.4, 6.0 #1164
  posted: 05/09/08
  
• Deep Inspection 5.1, 5.2, 5.3r4 and below #1155
  posted: 05/09/08
  
• Deep Inspection 5.0 #1132
  posted: 04/01/08
  
• Antivirus
  posted: 05/09/08

Text Size:        

• See Also
• Current Updates

• Microsoft Security Resources
• Security Incidents
• Security Resources

• Juniper Networks Product Solutions for Microsoft
• Get detailed information about Juniper solutions that protect your Microsoft environment:
• SSL VPNs
• Intrusion Prevention
• Firewall / VPN Central Management34 KB
• VPN Resiliency594 KB
• Denial of Service and Attack Prevention754 KB
• Antivirus Protection55 KB

August 2005

---

Prior Updates:

---

Login to learn more about how Juniper Networks products can protect you from these vulnerabilities. (If you don't already have a login, see Requesting Support.)

August 2005

Microsoft Security Bulletin MS05-038

Cumulative Security Update for Internet Explorer (896727)

Severity: Critical
Vulnerabilities:

• JPEG Image Rendering Memory Corruption Vulnerability - CAN-2005-1988
  A remote code execution vulnerability exists in Internet Explorer because of the way that it handles JPEG images. An attacker could exploit the vulnerability by constructing a malicious JPEG image that could potentially allow remote code execution if a user visited a malicious Web site or viewed a malicious e-mail message. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

Microsoft Security Bulletin MS05-039

Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588)

Severity: Critical
Vulnerabilities:

• Plug and Play Vulnerability - CAN-2005-1983
  A remote code execution and local privilege elevation vulnerability exists in Plug and Play that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system.

Microsoft Security Bulletin MS05-040

Vulnerability in Windows Telephony Service Could Allow Remote Code Execution (893756)

Severity: Important
Vulnerabilities:

• TAPI Vulnerability - CAN-2005-0058
  A remote code execution vulnerability exists in Telephony Application Programming Interface (TAPI) that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system.

Microsoft Security Bulletin MS05-041

Vulnerability in Remote Desktop Protocol Could Allow Denial of Service (899591)

Severity: Moderate
Vulnerabilities:

• Remote Desktop Protocol Vulnerability - CAN-2005-1218
  A denial of service vulnerability exists that could allow an attacker to send a specially crafted Remote Data Protocol (RDP) message to an affected system. An attacker could cause this system to stop responding.

Microsoft Security Bulletin MS05-042

Vulnerabilities in Kerberos Could Allow Denial of Service, Information Disclosure, and Spoofing (899587)

Severity: Moderate
Vulnerabilities:

• Kerberos Vulnerability - CAN-2005-1981
  A denial of service vulnerability exists that could allow an attacker to send a specially crafted message to a Windows domain controller that could cause the service that is responsible for authenticating users in an Active Directory domain to stop responding.

Microsoft Security Bulletin MS05-043

Vulnerability in Print Spooler Service Could Allow Remote Code Execution (896423)

Severity: Critical
Vulnerabilities:

• Print Spooler Vulnerability - CAN-2005-1984
  A remote code execution vulnerability exists in the Printer Spooler service that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system.