Security Bulletin
of July 18, 2006

Overview
Who is Affected

Recommended Actions

Administrative Users
Academic and All Home Windows Users
Academic and All Home Macintosh Users
Tips for Safer Computing
Further Assistance

Other Bulletins
Recent CERT Alerts

ADMINISTRATIVE Staff: If you use a computer at HOME, please read on.

STUDENTS, FACULTY, ADMINISTRATIVE STAFF, ACADEMIC STAFF AND ALL HOME USERS must follow the recommendations below.

I. OVERVIEW

Serious security holes have been identified in Microsoft Windows, Internet Explorer, Microsoft Office for Window, and Microsoft Office for the Macintosh. To protect your computer, and other computers on the network, follow the instructions below. This will install all the applicable critical updates issued by Microsoft on July 11, 2006. If you missed earlier Microsoft updates, it will apply those as well.

In addition to applying the updates described below, do not open unfamiliar or unexpected Microsoft Excel or other Office documents, including those received as email attachments or hosted on a web site. A vulnerability in Microsoft Excel, for which there is not yet a fix, could allow an attacker to gain control of your computer.

II. WHO IS AFFECTED?

All Windows, and Macintosh systems with Microsoft Office, are vulnerable to at least some of the critical security threats addressed in this bulletin.

III. RECOMMENDED ACTION - ADMINISTRATIVE USERS ON CAMPUS

Administrative users will be receiving a separate email in regard to their office computers. However, all users must follow the instructions below appropriate for their home systems.

IV. RECOMMENDED ACTION - STUDENTS, FACULTY, ACADEMIC STAFF, and ALL HOME WNDOWS COMPUTER USERS

1. Install all Windows and Office 2003 critical updates. Open INTERNET EXPLORER and go to http://update.microsoft.com/
2. Office 2000 users must also all Microsoft Office critical updates. Open INTERNET EXPLORER and navigate to http://office.microsoft.com/officeupdate

V. RECOMMENDED ACTION - STUDENTS, FACULTY, ACADEMIC STAFF, and ALL HOME MACINTOSH COMPUTER USERS

1. Install all Microsoft Office critical updates. Navigate to http://www.microsoft.com/mac/downloads.aspx and install the updates appropriate to your version of Office.

VI. PRACTICE SAFER COMPUTING ALL THE TIME

Always follow the guidelines to Protect Your Computer at http://www.haverford.edu/acc/protect/.

VII. FOR FURTHER ASSISTANCE

Students, faculty and academic staff please contact Academic Computing:
Telephone: 610-896-1480
Email: compctr@haverford.edu
Web: http://www.haverford.edu/acc/helpdesk/
In Person: Stokes 204 9am to 5pm, Monday through Friday and until 9am to 9pm on Tuesdays.

Administrative staff please contact Administrative Computing:
Telephone: 610-896-1355
Email: admincc@haverford.edu

VI. MORE INFORMATION

Additional information about computer security and current threats can be found at the following sites:

United States Computer Emergency Readiness Team (US-CERT ) Recent Alerts

<http://www.us-cert.gov/nav/nt01/>

<http://www.us-cert.gov/cas/alerts/>

US-CERT Alerts used for this bulletin

<http://www.us-cert.gov/cas/alerts/SA06-192A.html>

<http://www.us-cert.gov/cas/alerts/SA06-167A.html>

McAfee Avert Threat Center

<http://www.mcafee.com/us/threat_center/default.asp>

Microsoft Security

<http://www.microsoft.com/security/>

Apple Product Security

<http://www.apple.com/support/security/>