Microsoft Sicherheitsbulletins des Jahres 1999 in einer Übersicht

[Lemmi]

Dezember 1999

• MS99-060 : HTML Mail Attachment Vulnerability
• MS99-061 : Escape Character Parsing Vulnerability
• MS99-058 : Virtual Directory Naming Vulnerability
• MS99-059 : Malformed TDS Packet Header Vulnerability
• MS99-057 : Malformed Security Identifier Request Vulnerability
• MS99-056 : Syskey Keystream Reuse Vulnerability
• MS99-055 : Malformed Resource Enumeration Argument Vulnerability
• MS99-050 : Server-side Page Reference Redirect Vulnerability
• MS99-053 : Windows Multithreaded SSL ISAPI Filter Vulnerability
• MS99-054 : WPAD Spoofing Vulnerability

November 1999

• MS99-052 : Legacy Credential Caching Vulnerability
• MS99-051 : IE Task Scheduler Vulnerability
• MS99-049 : File Access URL Vulnerability
• MS99-048 : Active Setup Control Vulnerability
• MS99-047 : Malformed Spooler Request Vulnerability

Oktober 1999

• MS99-046 : Improve TCP Initial Sequence Number Randomness
• MS99-045 : Virtual Machine Verifier Vulnerability
• MS99-044 : Excel SYLK Vulnerability
• MS99-043 : Javascript Redirect Vulnerability
• MS99-042 : IFRAME ExecCommand Vulnerability

September 1999

• MS99-041 : RASMAN Security Descriptor Vulnerability
• MS99-040 : Download Behavior Vulnerability
• MS99-039 : Domain Resolution and FTP Download Vulnerabilities
• MS99-038 : Spoofed Route Pointer Vulnerability
• MS99-037 : ImportExportFavorites Vulnerability
• MS99-036 : Windows NT 4.0 Does Not Delete Unattended Installation File
• MS99-035 : Set Cookie Header Caching Vulnerability
• MS99-033 : Malformed Telnet Argument Vulnerability
• MS99-034 : Fragmented IGMP Packet Vulnerability

August 1999

• MS99-032 : scriptlet.typelib/Eyedog Vulnerability
• MS99-031 : Virtual Machine Sandbox Vulnerability
• MS99-030 : Office ODBC Vulnerabilities
• MS99-029 : Malformed HTTP Request Header Vulnerability
• MS99-028 : Terminal Server Connection Request Flooding Vulnerability
• MS99-027 : Encapsulated SMTP Address Vulnerability

Juli 1999

• MS99-026 : Malformed Dialer Entry Vulnerability
• MS99-025 : Unauthorized Access to IIS Servers through ODBC Data Access with RDS
• MS99-024 : Unprotected IOCTLs Vulnerability

Juni 1999

• MS99-023 : Malformed Image Header Vulnerability
• MS99-022 : Double Byte Code Page Vulnerability
• MS99-021 : CSRSS Worker Thread Exhaustion Vulnerability
• MS99-020 : Malformed LSA Request Vulnerability
• MS99-019 : Malformed HTR Request Vulnerability

Mai 1999

• MS99-018 : Malformed Favorites Icon Vulnerability
• MS99-017 : RAS and RRAS Password Vulnerability
• MS99-016 : Malformed Phonebook Entry Vulnerability
• MS99-015 : Malformed Help File Vulnerability
• MS99-014 : Excel 97 Virus Warning Vulnerabilities
• MS99-013 : File Viewers Vulnerability

April 1999

• MS99-012 : MSHTML Update Available for Internet Explorer
• MS99-011 : DHTML Edit Vulnerability

März 1999

• MS99-010 : File Access Vulnerability in Personal Web Server
• MS99-009 : Malformed Bind Request Vulnerability
• MS99-008 : Windows NT Screen Saver Vulnerability

Februar 1999

• MS99-007 : Taskpads Scripting Vulnerability
• MS99-006 : Windows NT Known DLLs List Vulnerability
• MS99-005 : BackOffice Server 4.0 Does Not Delete Installation Setup File
• MS99-004 : Authentication Processing Error in Windows NT 4.0 Service Pack 4
• MS99-003 : IIS Malformed FTP List Request Vulnerability

Januar 1999

• MS99-002 : Word 97 Template Vulnerability
• MS99-001 : Exposure in Forms 2.0 TextBox Control that allows data to be read from user's Clipboard