IKARUS Security Software GmbH :: Microsoft Security Response April 2010

The security-suite craze has no end in sight! The things marketing promises us all verge on culpable negligence. It could be a laughing matter if one wouldn't have to witness the half-witted promises made on the topic of all-encompassing, carefree security.

News

August 24, 2010

Full virus database update: increased network utilisation possible

relevant to

IKARUS virus.utilities
IKARUS security.manager und
IKARUS security.proxy

August 19, 2010

Protected by IKARUS: The labour court of Thuringia

From now on the labour court of Thuringia relies on know-how made in Austria...

August 12, 2010

Award: 100% detection rate for current viruses

IKARUS virus.utilities receives coveted VB100 award

August 9, 2010

Warning: fake e-mails from Twitter & Co.

Warning: alleged e-mails from popular online services misuse personal data

Microsoft Security Response April 2010

Microsoft Bulletin MS10-019

KB981210 (threat level: medium) - WinVerifyTrust Signature Validation Vulnerability

Threat level Microsoft:	medium
CVE ID:	CVE-2010-0486
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-019.mspx

KB981210 (threat level: medium) - Cabview Corruption Validation Vulnerability

Threat level Microsoft:	medium
CVE ID:	CVE-2010-0487
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-019.mspx

Go to top

Microsoft Bulletin MS10-020

KB980232 (threat level: low) - SMB Client Memory Allocation Vulnerability

Threat level Microsoft:	low
CVE ID:	CVE-2010-0269
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Basee

http://www.microsoft.com/technet/security/Bulletin/MS10-020.mspx

KB980232 (threat level: medium) - SMB Client Transaction Vulnerability

Threat level Microsoft:	medium
CVE ID:	CVE-2010-0270
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-020.mspx

KB980232 (threat level: medium) - SMB Client Response Parsing Vulnerability

Threat level Microsoft:	medium
CVE ID:	CVE-2010-0476
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-020.mspx

KB980232 (threat level: low) - SMB Client Message Size Vulnerability

Threat level Microsoft:	low
CVE ID:	CVE-2010-0477
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-020.mspx

KB980232 (threat level: low) - SMB Client Incomplete Response Vulnerability

Threat level Microsoft:	low
CVE ID:	CVE-2010-3676
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-020.mspx

Go to top

Microsoft Bulletin MS10-021

KB979683 (threat level: high) - Windows Kernel Memory Allocation Vulnerability

Threat level Microsoft:	high
CVE ID:	CVE-2010-0236
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-021.mspx

KB979683 (threat level: high) - Windows Kernel Symbolic Link Creation Vulnerability

Threat level Microsoft:	high
CVE ID:	CVE-2010-0237
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-021.mspx

Go to top

Microsoft Bulletin MS10-022

KB981169 (threat level: high) - Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution

Threat level Microsoft:	high low für Windows Server 2008, Windows 7, and Windows Server 2008 R2
CVE ID:	CVE-2010-0483
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/bulletin/MS10-022.mspx

Go to top

Microsoft Bulletin MS10-023

KB981160 (threat level: high) - Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution

Threat level Microsoft:	high
CVE ID:	CVE-2010-0479
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/bulletin/ms10-023.mspx

Go to top

Microsoft Bulletin MS10-024

KB981832 (Threat level: low) - SMTP Server MX Record Vulnerability

Threat level Microsoft:	low
CVE ID:	CVE-2010-0024
IKARUS classification:	Category 1: not relevant for IKARUS products
	The exploit itself is not recognizable by us. The resulting malware is, if known to us, detectable.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-024.mspx

Go to top

Microsoft Bulletin MS10-025

KB980858 (threat level: high) - Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution

Threat level Microsoft:	high
CVE ID:	CVE-2010-0478
IKARUS classification:	Category 1: not relevant for IKARUS products
	The exploit itself is not recognizable by us. The resulting malware is, if known to us, detectable.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-025.mspx

Go to top

Microsoft Bulletin MS10-026

KB977816 (threat level: high) - Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution

Threat level Microsoft:	high
CVE ID:	CVE-2010-0480
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-026.mspx

Go to top

Microsoft Bulletin MS10-027

KB979402 (threat level: high) - Vulnerability in Windows Media Player Could Allow Remote Code Execution

Threat level Microsoft:	high
CVE ID:	CVE-2010-0268
IKARUS classification:	Category 2: Relevant (but no samples)
	Der Exploit selbst ist nicht von uns erkennbar. Daraus resultierende Malware ist, soweit sie uns bekannt ist, jedoch auffindbar.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/Bulletin/MS10-027.mspx

Go to top

Microsoft Bulletin MS10-028

KB980094 (threat level: high) - Visio Attribute Validation Memory Corruption Vulnerability

Threat level Microsoft:	high
CVE ID:	CVE-2010-0254
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/bulletin/MS10-028.mspx

KB980094 (threat level: high) - Visio Index Calculation Memory Corruption Vulnerability

Threat level Microsoft:	high
CVE ID:	CVE-2010-0256
IKARUS classification:	Category 2: Relevant (but no samples)
	At the time of publication there is no malware known to us which exploits this bug.

Further Informationen and Solution

Further information and solutions are available at the Microsoft Knowledge Base

http://www.microsoft.com/technet/security/bulletin/MS10-028.mspx

Go to top

IKARUS Shop

Blog

News

Microsoft Security Response April 2010

Categories

Microsoft Bulletin MS10-019

KB981210 (threat level: medium) - WinVerifyTrust Signature Validation Vulnerability

KB981210 (threat level: medium) - Cabview Corruption Validation Vulnerability

Microsoft Bulletin MS10-020

KB980232 (threat level: low) - SMB Client Memory Allocation Vulnerability

KB980232 (threat level: medium) - SMB Client Transaction Vulnerability

KB980232 (threat level: medium) - SMB Client Response Parsing Vulnerability

KB980232 (threat level: low) - SMB Client Message Size Vulnerability

KB980232 (threat level: low) - SMB Client Incomplete Response Vulnerability

Microsoft Bulletin MS10-021

KB979683 (threat level: high) - Windows Kernel Memory Allocation Vulnerability

KB979683 (threat level: high) - Windows Kernel Symbolic Link Creation Vulnerability

Microsoft Bulletin MS10-022

KB981169 (threat level: high) - Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution

Microsoft Bulletin MS10-023

KB981160 (threat level: high) - Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution

Microsoft Bulletin MS10-024

KB981832 (Threat level: low) - SMTP Server MX Record Vulnerability

Microsoft Bulletin MS10-025

KB980858 (threat level: high) - Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution

Microsoft Bulletin MS10-026

KB977816 (threat level: high) - Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution

Microsoft Bulletin MS10-027

KB979402 (threat level: high) - Vulnerability in Windows Media Player Could Allow Remote Code Execution

Microsoft Bulletin MS10-028

KB980094 (threat level: high) - Visio Attribute Validation Memory Corruption Vulnerability

KB980094 (threat level: high) - Visio Index Calculation Memory Corruption Vulnerability

See also

Support