Internet Storm Center reported about available exploit code for MS06-034, MS06-035, and MS06-036. If you haven’t already patched for these vulnerabilities you should take immediate action. MS06-034 – unchecked IIS buffer vulnerability in ASP files processing This patch fixes what seems to be a buffer overflow in IIS. This buffer overflow can be exploited when

eEye has released a patch for the active IE vulnerability. Organizations that choose to employ this workaround should take the steps required to uninstall it once the official Microsoft patch is released. This workaround is not meant to replace the forthcoming Microsoft patch, rather it is intended as a temporary protection against this flaw. Organizations

Some vulnerabilities have been reported in various RealNetworks products, which can be exploited by malicious people to compromise a user’s system. 1) A boundary error when processing SWF files can be exploited to cause a buffer overflow. This may allow execution of arbitrary code on the user’s system. 2) A boundary error within the handling

Windows Media player has a unchecked buffer that will allow for remote code execution if users view or open a specially crafted .bmp file. Keep in mind there are many ways for this to be exploited and .bmp files are not the only way. Microsoft states: “An attacker could also attempt to exploit this vulnerability

Sun has released an alert on 7 vulnerabilities in JRE. These vulnerabilities are related to the use of “reflection” API in JRE. As noted in the alert, there is no workaround, upgrading to the latest version is the only solution. Read How to update Java.