Microsoft Windows Security Bulletin Summary for July 2.0 (Windows)

Overview:

Bulletin Identifier Microsoft Security Bulletin MS04-022 Bulletin Title: Vulnerability in Task Scheduler Could Allow Code Execution (841873) Executive Summary: A remote code execution vulnerability exists in the Task Scheduler because of the way that it handles application name validation. Maximum Severity Rating: Critical Impact of Vulnerability: Remote Code Execution Affected Software: Windows. For more information, see the Affected Software and Download Locations section. Bulletin Identifier Microsoft Security Bulletin MS04-023 Bulletin Title: Vulnerability in HTML Help Could Allow Code Execution (840315) Executive Summary: Two remote code execution vulnerabilities exist in HTML Help. Maximum Severity Rating: Critical Impact of Vulnerability: Remote Code Execution Affected Software: Windows. For more information, see the Affected Software and Download Locations section. Bulletin Identifier Microsoft Security Bulletin MS04-019 Bulletin Title: Vulnerability in Utility Manager Could Allow Code Execution (842526) Executive Summary: A privilege elevation vulnerability exists in the way that Utility Manager launches applications. Maximum Severity Rating: Important Impact of Vulnerability: Local Elevation of Privilege Affected Software: Windows. For more information, see the Affected Software and Download Locations section. Bulletin Identifier Microsoft Security Bulletin MS04-020 Bulletin Title: Vulnerability in POSIX Could Allow Code Execution (841872) Executive Summary: A privilege elevation vulnerability exists in the POSIX subsystem. Maximum Severity Rating: Important Impact of Vulnerability: Local Elevation of Privilege Affected Software: Windows. For more information, see the Affected Software and Download Locations section. Bulletin Identifier Microsoft Security Bulletin MS04-021 Bulletin Title: Security Update for IIS 4.0 (841373) Executive Summary: A buffer overrun vulnerability exists in Internet Information Server 4.0. Maximum Severity Rating: Important Impact of Vulnerability: Remote Code Execution Affected Software: Windows. For more information, see the Affected Software and Download Locations section. Bulletin Identifier Microsoft Security Bulletin MS04-024 Bulletin Title: Vulnerability in Windows Shell Could Allow Remote Code Execution (839645) Executive Summary: A remote code execution vulnerability exists in the way that the Windows Shell launches applications. User interaction is required to exploit this vulnerability. Maximum Severity Rating: Important Impact of Vulnerability: Remote Code Execution Affected Software: Windows. For more information, see the Affected Software and Download Locations section. Bulletin Identifier Microsoft Security Bulletin MS04-018 Bulletin Title: Cumulative Security Update for Outlook Express (823353) Executive Summary: A denial of service vulnerability exists that could allow an attacker to send a specially crafted e-mail message causing Outlook Express to fail. Maximum Severity Rating: Moderate Impact of Vulnerability: Denial of Service Affected Software: Windows, Outlook Express. For more information, see the Affected Software and Download Locations section.

(Is this item miscategorized? Does it need more tags? Let us know.)