| Date (UTC) | Description |
| 2006-12-18 15:50 |
Internet Security Systems
AlertCon (2) => (1)
|
| 2006-12-13 02:06 |
JPCERT/CC
JPCERT-AT-2006-0020: Dec 2006 Microsoft Security Bulletin (including three critical patches)
|
| 2006-12-12 22:10 |
Internet Security Systems
AlertCon (1) => (2)
Microsoft: The Microsoft December Security Bulletin Release (MS06-072 - MS06-078), 3 "Critical" and 4 "Important", consisted of 11 issues.
|
| 2006-12-12 22:07 |
US-CERT
TA06-346A: Microsoft Updates for Multiple Vulnerabilities
Microsoft has released updates that address critical vulnerabilities in Microsoft Windows, Visual Studio, Microsoft Outlook Express, Microsoft Media Player, and Microsoft Internet Explorer. Exploitation of these vulnerabilities could allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service on a vulnerable system.
|
| 2006-12-12 |
Microsoft
Microsoft Security Advisory (927709): Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution
Microsoft has completed the investigation into a public report of this vulnerability. We have issued MS06-073 to address this issue.
|
| 2006-12-12 |
Microsoft
MS06-DEC: Microsoft Security Bulletin Summary for December, 2006
Included in this advisory are updates for newly discovered vulnerabilities.
|
| 2006-12-12 |
Internet Security Systems
Critical Vulnerabilities in MS06-072
|
| 2006-12-12 |
Internet Security Systems
Critical Vulnerability in MS06-074
|
| 2006-12-12 |
Internet Security Systems
Critical Vulnerabilities in MS06-078
|
| 2006-11-09 |
SANS Internet Storm Center
Windows WMIObjectBroker (Visual Studio 2005) 0-Day Exploit
Rohit from Tippingpoint adviced us that he is seeing a large number of attacks from Russia using an un-patched vulnerability in the WMIObjectBroker ActiveX control (CVE-2006-4704). He is seeing it used as part of a drive-by download. Typically, the Trojan "Galopoper.A" is load.
|
| 2006-11-08 |
Microsoft
Microsoft Security Advisory (927709): Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution
Advisory updated to alert customers that we are aware of attacks using the reported vulnerability.
|
| 2006-11-01 19:21 |
Full-disclosure
[Full-disclosure] Microsoft patches the WMI Object Broker bug
a proof-of-concept code for WMI Object Broker Vulnerability (CVE-2006-4704,MS06-073)
#Cid: ie_createobject.pm
|
| 2006-11-01 |
US-CERT
Exploit Code Posted for Vulnerability in Microsoft's Visual Studio
a proof-of-concept code for WMI Object Broker Vulnerability (CVE-2006-4704,MS06-073)
US-CERT is aware of publicly available exploit code for a new vulnerability in the Windows Management Instrumentation (WMI) Object Broker ActiveX control.
|
| 2006-10-31 |
Microsoft
Microsoft Security Advisory (927709): Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution
Advisory published.
|
| 2006-08-31 |
Zero Day Initiative (ZDI)
ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability
DHTML Script Function Memory Corruption Vulnerability(CVE-2006-5581,MS06-072)
Vulnerability Reported
|
| 2006-08-15 |
Secunia Research
2006-58: Internet Explorer Script Error Handling Memory Corruption
Script Error Handling Memory Corruption Vulnerability(CVE-2006-5579,MS06-072)
Vulnerability Reported
|
| 2006-06-15 |
Zero Day Initiative (ZDI)
ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability
WMI Object Broker Vulnerability(CVE-2006-4704,MS06-073)
Vulnerability Reported
|