Nortel Response to Microsoft Security Bulletin MS07-064
| Description: |
Before taking any action please ensure that you are viewing the latest official version of this security advisory by referencing http://www.nortel.com/securityadvisories On December 11, 2007, Microsoft released a security update MS07-064 - Vulnerabilities in DirectX Could Allow Remote Code Execution (941568). Some Nortel products contain this software as a component and thus are potentially affected by the vulnerability addressed. This bulletin provides a multi-product consolidated response for the Nortel products which are potentially affected. MS07-064 addresses the following potential vulnerabilities: 1) Microsoft DirectX Code Execution Vulnerability Parsing SAMI Files - CVE-2007-3901 A remote code execution vulnerability exists in the way DirectX handles supported format files. This vulnerability could allow code execution if a user opened a specially crafted file. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. 2) Microsoft DirectX Code Execution Vulnerability Parsing WAV and AVI Files - CVE-2007-3895 A remote code execution vulnerability exists in the way DirectX handles WAV and AVI format files. This vulnerability could allow code execution if a user visits a specially crafted Web site or opens an e-mail message with specially crafted content. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer |
| Type: |
Security Advisories |
| Number: |
2007008517, Rev 1 |
| Status: |
Retired |
| Date: |
2008-03-14 |
