CAN20040218d
Microsoft February 2004 Updates

Microsoft Issues Two Critical Updates For Windows, Internet Explorer

Dates & Revisions

• Original CAN date: February 18, 2004
• Latest revision: February 18, 2004

Systems Affected

Problem Overview

In an attempt to make patch management easier for its operating systems and chief server products, Microsoft issues monthly compilations of its security patches. For February 2004, Microsoft has issued two patches - one for the operating systems listed above, and one for its popular Internet Explorer web browser. Each of these patches fixes problems which Microsoft has deemed as critical.

Since each of our clients is certain to have at least one of the affected systems on their computer, we urge you to carefully review all of the information below and correct all problems which pertain to your computer.

1. ASN .1 Vulnerability Could Allow Code Execution - In certain situations, a remote user could be authenticated to execute code on your PC with elevated privileges. Source code demonstrating how to take advantage of this vulnerability has already been discovered on various hacker-related web sites, prompting security companies to issue warnings of a forthcoming attack.

2. Internet Explorer February 2004 Cumulative Security Update - Fix the latest security loopholes in Internet Explorer which would allow an attacker to execute code on your machine while visiting a malicious web site. You do not have to be using IE as your default web browser to be vulnerable to the latest discovered security flaws.

Problem Details

For detailed technical descriptions of the problem, please review the following links:

• Microsoft Security Bulletin Overview for February 2004
• Microsoft Security Bulletin MS04-004 - February 2004 Cumulative Patch for Internet Explorer
• Microsoft Security Bulletin MS04-007 - ASN .1 Vulnerability
• ComputerWorld article re:Hackers and the ASN .1 Vulnerability
• US-CERT Security Alert re: ASN.1 Vulnerability

Please note that the organizations controlling the content of the web sites referenced by these links may periodically update the information on their sites as new details about the severity of the threat become known.

What Should I Do?

You should immediately:

• review the bulletins listed above and
• download and apply all Microsoft patches listed above which apply to your system.

What If I Am Unable To Fix The Problem?

If you are unable to correct these problems yourself or are unsure how to proceed, contact Logical Operators by clicking here and arrange to have one of our service technicians check your system and apply the corrections for you (standard service fees will apply). In addition to correcting the problem(s) listed in this CAN, our technicians can also test your system for thousands of other known threats which may be present on your system, make valuable recommendations on securing your system from future threats, and perform numerous other computing services.