BreakingPoint Systems is making available the details we have
discovered from October's Microsoft Tuesday patches. We have released
details on what we've discovered so far to our Strike Center blog:
https://strikecenter.bpointsys.com/articles/2007/10/10/october-2007-
microsoft-tuesday
We appreciate any feedback you might have.
Thanks.
-Todd.
Charlie Miller, Independent Security Evaluators
Julie Ryan, George Washington University
Richard Favier, BreakingPoint Systems
Ryan Kaminski, Columbia University
Maarten Van Horenbeeck, Microsoft Security Response Center
The Cisco PSIRT is not aware of any public announcements or malicious
use of the vulnerability described in this advisory.
This vulnerability was reported to Cisco by HD Moore of BreakingPoint
Systems.
Status of this Notice: FINAL
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY
KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF