Microsoft Windows Security Bulletin Summary for Ju 2.0

• Affected Software: Windows. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier Microsoft Security Bulletin MS04-023
Bulletin Title: Vulnerability in HTML Help Could Allow Code Execution (840315)
Executive Summary: Two remote code execution vulnerabilities exist in HTML Help.
Maximum Severity Rating: Critical
Impact of Vulnerability: Remote Code Execution
Affected Software: Windows. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier Microsoft Security Bulletin MS04-019
Bulletin Title: Vulnerability in Utility Manager Could Allow Code Execution (842526)
Executive Summary: A privilege elevation vulnerability exists in the way that Utility Manager launches applications.
Maximum Severity Rating: Important
Impact of Vulnerability: Local Elevation of Privilege
Affected Software: Windows. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier Microsoft Security Bulletin MS04-020
Bulletin Title: Vulnerability in POSIX Could Allow Code Execution (841872)
Executive Summary: A privilege elevation vulnerability exists in the POSIX subsystem.
Maximum Severity Rating: Important
Impact of Vulnerability: Local Elevation of Privilege
Affected Software: Windows. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier Microsoft Security Bulletin MS04-021
Bulletin Title: Security Update for IIS 4.0 (841373)
Executive Summary: A buffer overrun vulnerability exists in Internet Information Server 4.0.
Maximum Severity Rating: Important
Impact of Vulnerability: Remote Code Execution
Affected Software: Windows. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier Microsoft Security Bulletin MS04-024
Bulletin Title: Vulnerability in Windows Shell Could Allow Remote Code Execution (839645)
Executive Summary: A remote code execution vulnerability exists in the way that the Windows Shell launches applications. User interaction is required to exploit this vulnerability.
Maximum Severity Rating: Important
Impact of Vulnerability: Remote Code Execution
Affected Software: Windows. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier Microsoft Security Bulletin MS04-018
Bulletin Title: Cumulative Security Update for Outlook Express (823353)
Executive Summary: A denial of service vulnerability exists that could allow an attacker to send a specially crafted e-mail message causing Outlook Express to fail.
Maximum Severity Rating: Moderate
Impact of Vulnerability: Denial of Service
Affected Software: Windows, Outlook Express. For more information, see the Affected Software and Download Locations section.