Microsoft Security Bulletin MS06-055 - PATCH

[Wiz Feinberg]

<h1>URGENT NOTICE</h1>
<h2>Windows Patch Released</h2>

Vulnerability in Vector Markup Language Could Allow Remote Code Execution (925486)

Published: September 26, 2006.

Microsoft has completed the investigation into a public report of this vulnerability. We have issued MS06-055 to address this issue. For more information about this issue, including download links for an available security update, please review MS06-055. The vulnerability addressed is the Microsoft PowerPoint Mso.dll Vulnerability - CVE-2006-4868.

Version: 1.0
Summary

Who Should Read this Document: Customers who use Microsoft Windows

Impact of Vulnerability: Remote Code Execution

Maximum Severity Rating: Critical

Recommendation: Customers should apply the update immediately

Security Update Replacement: This bulletin replaces a prior security update. See the frequently asked questions (FAQ) section of this bulletin for the complete list.

There are download links on the Bulletin page, or you can obtain the patch via Windows Update website, or Automatic Updates.

This patch will require a reboot to completely install it.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
<small>Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.</small>

[Wiz Feinberg]

If you took my advise earlier and unregistered the vulnerable vgx.dll as a workaround, and have applied the official patch released just today, you must re-register the vgx.dll, using this command in the RUN box:

regsvr32 "%ProgramFiles%\Common Files\Microsoft Shared\VGX\vgx.dll"

If this is successful you will get a popup notice that the registration "took."<font size="1" color="#8e236b"><p align="center">[This message was edited by Wiz Feinberg on 26 September 2006 at 07:57 PM.]</p></FONT>