5 Windows vulnerabilities for October 2003 (4 critical, 1 important)

[Chris Wysopal <weld () vulnwatch org>]

Microsoft has moved to a monthly bulletin schedule.

*Critical*

Vulnerability in Authenticode Verification Could Allow Remote Code
Execution (823182)
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-041.asp

Buffer Overflow in Windows Troubleshooter ActiveX Control Could Allow Code
Execution (826232)
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-042.asp

Buffer Overrun in Messenger Service Could Allow Code Execution (828035)
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-043.asp

Buffer Overrun in Windows Help and Support Center Could Lead to System
Compromise (825119)
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-044.asp


*Important*

Buffer Overrun in the ListBox and in the ComboBox Control Could Allow Code
Execution (824141)
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-045.asp