Microsoft Windows Security Bulletin for July 1.0

Bulletin Identifier: Microsoft Security Bulletin MS04-016
Bulletin Title: Vulnerability in DirectPlay Could Allow Denial of Service (839643)
Executive Summary: A denial of service vulnerability exists in the IDirectPlay4 API of Microsoft DirectPlay because of a lack of robust packet validation.
Maximum Severity Rating: Moderate
Impact of Vulnerability: Denial of Service
Affected Software: Windows Server 2003, Windows Server 2003 64-bit Edition, Windows XP, Windows XP 64-bit Edition Service Pack 1, Windows XP 64-bit Edition Version 2003, Windows 2000 Service Pack 2, Windows 2000 Service Pack 3, Windows 2000 Service Pack 4, Windows Millenium Edition (ME), Windows 98 Second Edition (SE), Windows 98
Windows Affected Operating System Components: DirectX 8.0, 8.0a - (For Windows 2000), DirectX 8.1, 8.1a, 8.1b - (For Windows 2000), DirectX 8.2 - (For Windows 2000 and Windows XP), DirectX 9.0, 9.0a, 9.0b - (For Windows 2000 or later)

Bulletin Identifier: Microsoft Security Bulletin MS04-017
Bulletin Title: Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service (842689)
Executive Summary: A directory traversal vulnerability exists in Crystal Reports and Crystal Enterprise from Business Objects that could allow Information Disclosure and Denial of Service attacks on an affected system.
Maximum Severity Rating: Moderate
Impact of Vulnerability: Information Disclosure and Denial of Service
Affected Software: Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2.