Microsoft Advisories February 2005 - infectionvectors.com,,,,,,,,,,,, ,,,,,,,,,,,, Bulletin,KB#,Tag,Supercedes,Risk,.NET,NT4 6a,W2K SP3,W2K SP4,XP SP1,XP SP2,2003,Tech Bulletin MS05-004,887219,ASP.NET Path Validation,N/A,Important,v1.0 & 1.1,,,,,,,http://www.microsoft.com/technet/security/bulletin/MS05-004.mspx MS05-005,873352,Office XP Buffer Overrun,MS04-028*,Critical,,,,,,,,http://www.microsoft.com/technet/security/bulletin/MS05-005.mspx MS05-006,887981,SharePoint XSS/Spoofing,N/A,Moderate,,,,,,,X,http://www.microsoft.com/technet/security/bulletin/MS05-006.mspx MS05-007,888302,Windows Info Disclosure,N/A,Important,,,X,X,,,X,http://www.microsoft.com/technet/security/bulletin/MS05-007.mspx MS05-008,890047,Windows Shell ,N/A,Important,,,X,X,X,X,X,http://www.microsoft.com/technet/security/bulletin/MS05-008.mspx MS05-009,890261,WMP/Messenger PNG ,MS04-010 MS03-21,Critical,,,X,X,X,,X,http://www.microsoft.com/technet/security/bulletin/MS05-009.mspx MS05-010,885834,License Logging Overrun,N/A,Critical,,X,X,X,,,X,http://www.microsoft.com/technet/security/bulletin/MS05-010.mspx MS05-011,885250,SMB Vulnerability,N/A,Critical,,,X,X,X,X,X,http://www.microsoft.com/technet/security/bulletin/MS05-011.mspx MS05-012,873333,OLE/COM Vulnerability,"MS03-010, 03-026, 03-039",Critical,,,X,X,X,X,X,http://www.microsoft.com/technet/security/bulletin/MS05-012.mspx MS05-013,891781,DHTML Editing/ActiveX,N/A,Critical,,,X,X,X,X,X,http://www.microsoft.com/technet/security/bulletin/MS05-013.mspx MS05-014,867282,IE Cumulative Update,MS04-038/04-040,Critical,,,X,X,X,X,X,http://www.microsoft.com/technet/security/bulletin/MS05-014.mspx MS05-015,888113,Hyperlink Object Library,N/A,Critical,,,X,X,X,X,X,http://www.microsoft.com/technet/security/bulletin/MS05-015.mspx ,,,,,,,,,,,, Additional Notes,,,,,, SMB,Server Message Block,,,,, PNG,Portable Network Graphics,,,,, XSS,Cross-Site Scripting,,,,, OLE,Object Linking & Embedded Exchange,,,,, COM,Component Object Model,,,,, DHTML,Dynamic Hypertext Markup Language,,,,, MS05-005 ,"Affects Office XP as well as Project 2002, Visio 2002, and Works 2002-2004",,,,, *Replaces for Office XP ONLY.,,,,,, Note:, .NET vulnerbaility applies to Tablet PC and Media Center Edition OS,,,,, ,,,,,, MS05-014 ,Ensure the supported version of IE is on the device.,,,,, ,,,,,, ,,,,,, ,,,,,, ,,,,,,