Multiple bugs in Microsoft Windows operating systems - SSO-AD2008-04

09 July 2008

Software platforms affected

The following software is affected:

Windows 2000 Service Pack 4
Windows XP Service Pack 2
Windows XP Service Pack 3
Windows Vista
Windows Vista Service Pack 1
Windows 2000 Server Service Pack 4
Windows Server 2003 Service Pack 2
Windows Server 2008

What is the problem?

There are several bugs in various Microsoft Windows platforms, that if not fixed, could result in your computer being attacked by criminals.

What we recommend you do

The problem can be easily fixed by downloading and installing the software updates recommended by Microsoft.

Setting up automatic updates on your computer's operating system will save you time and reduce the risk to you and your files.

Information on how to setup Automatic Updates can be found here:

For Window XP:

http://www.ssoalertservice.net.au/view/8d826d7e1f09438435017ec08986beec 
http://www.microsoft.com/protect/computer/updates/xpsp2.mspx

For Windows 2000:

http://www.microsoft.com/protect/computer/updates/2000.mspx

For Windows Vista:

http://www.microsoft.com/protect/computer/updates/vista.mspx

Manually checking for updates can be performed by following the steps discussed in the following Microsoft article:

http://www.microsoft.com/protect/computer/updates/mu.mspx

Unless your operating system is already set to update itself automatically, it is recommended you apply the updates as soon as possible to reduce your risk.

Where you can find more information

The following links provide more information about the bugs and the software platforms affected:

http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx
http://www.microsoft.com/technet/security/bulletin/ms08-038.mspx

Disclaimer

This Advisory has been prepared by AusCERT for the Department of Broadband, Communications and the Digital Economy.

The information is intended for used by home users and small to medium sized businesses and is general information only and not intended as advice and was accurate and up to date at the time of publishing. The material and information in this Advisory is not adapted to any particular person's circumstances and therefore cannot be relied upon to be of assistance in any particular case. In any important matter, you should seek professional advice relevant to your own circumstances.

The Commonwealth, AusCERT, and all other persons associated with this Advisory accept no responsibility or liability for information either included or referred to in the Advisory. No responsibility or liability is accepted for any damage, loss or expense incurred as a result of the information contained in the Advisory, whether by way of negligence or otherwise.

The listing of a person or organisation in any part of this site or Advisory does not imply any form of endorsement by the Commonwealth of the products or services provided by that person or organisation. Similarly, links to other web sites have been inserted for your convenience and do not constitute endorsement of material at those sites, or any associated organisation, product or service.

Please note that material in this Advisory, as the case may be, includes views or recommendations of third parties, which do not necessarily reflect the views of the Commonwealth, or indicate its commitment to particular course of action. Material on this site or in this Advisory may also include information provided by third parties. The Commonwealth cannot verify the accuracy of information that has been provided by third parties.

---