Posted on February 08, 2006 04:09 PM
CRITICAL: Microsoft Internet Explorer WMF Handling Memory Corruption Vulnerability
A vulnerability in the rendering of Windows Metafile (WMF) images could allow an attacker to take complete control of the affected system. Attack vectors via malicious web site or e-mail. This is different from the issue addressed by MS06-001 and only impacts older versions of Internet Explorer. IE6SP1 or later is not vulnerable.
http://www.microsoft.com/technet/security/advisory/913333.mspx
http://www.frsirt.com/english/advisories/2006/0469
Posted on August 17, 2005 01:12 PM
Last week, Microsoft released a security patch to avert a newly discovered vulnerability that several worms such as W32.Esbot and W32.Zotob can exploit. If your Windows computer is running up-to-date antivirus software and current patches you are protected.
For further information on these worms including virus removal instructions, see http://www.symantec.com/avcenter/.
For details about the vulnerability, see
http://www.microsoft.com/technet/security/bulletin/ms05-039.mspx.
Contact the Help Desk at 863-HELP or Help@brown.edu if you believe you have been infected.
Posted on June 03, 2005 08:42 AM
Download.BBX is a Trojan carried via email with the subject "God Bless the USA!" The infected email leads the reader to believe that the file attachment is a collection of pictures of Osama bin Laden being captured.
Details of these viruses may be viewed at:
http://securityresponse.symantec.com/avcenter/venc/data/download.bbx.html
LiveUpdate definitions are now detecting this threat, and the SAV "managed" server current definitions.
If you did not attempt to open the attachment you are safe. Never open unexpected attachments!
Contact the Help Desk if you need further assistance at 863-HELP or Help@brown.edu.
Posted on May 31, 2005 10:37 AM
W32.Mytob.CU@mm and W32.Mydoom.BU@mm and some variants of these have appeared on campus. The email carries zip file attachments with various names.
Details of these viruses may be viewed at:
http://www.symantec.com/avcenter/venc/data/w32.mytob.cu@mm.html
http://www.symantec.com/avcenter/venc/data/w32.mydoom.bu@mm.html
LiveUpdate definitions are now detecting most of these threats, and the SAV "managed" server also has up-to-date definitions.
If you did not attempt to open the attachment you are safe. Never open unexpected attachments!
Contact the Help Desk if you need further assistance at 863-HELP or Help@brown.edu.