Full Disclosure mailing list archives
Re: Windows VML security update MS06-055 released
From: Alex Eckelberry <AlexE () sunbelt-software com>
Date: Wed, 27 Sep 2006 18:44:27 -0400
It is exactly the same day when Sunbelt reported that they were
informed Microsoft security people: We were the first to see it in the wild, but unbeknownst to the security community, Microsoft had reportedly been working with ISS on this issue (ISS disclosed it on the 19th -- http://xforce.iss.net/xforce/alerts/id/237). One can then assume that Microsoft was already in the process of fixing it, and while they were doing that, we started finding it exploiting systems. Alex -----Original Message----- From: Juha-Matti Laurio [mailto:juha-matti.laurio () netti fi] Sent: Tuesday, September 26, 2006 3:45 PM To: bugtraq () securityfocus com; full-disclosure () lists grok org uk Subject: Windows VML security update MS06-055 released Security update for Windows Vector Markup Language (VML) vulnerability has been released. Fix is available via Microsoft Update or downloadable with links included to MS06-055: http://www.microsoft.com/technet/security/bulletin/ms06-055.mspx Fix information has been added to Windows VML Vulnerability FAQ (CVE-2006-4868) http://blogs.securiteam.com/?p=640 and details will be added shortly. It appears that the timestamp of updated Vgx.dll library is 18th September, 2006.
From the Security Update Information / File Information section of new
MS bulletin: Windows XP Service Pack 2 (all versions) and Windows XP Professional x64 Vgx.dll - 6.0.2900.2997 - 18-Sep-2006 - 14:28 (UTC) - 851,968 It is exactly the same day when Sunbelt reported that they were informed Microsoft security people: http://sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-be ing.html - Juha-Matti _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Windows VML security update MS06-055 released Juha-Matti Laurio (Sep 26)
- Re: Windows VML security update MS06-055 released Jerome Athias (Sep 27)
- <Possible follow-ups>
- Re: Windows VML security update MS06-055 released Alex Eckelberry (Sep 28)