JPCERT-AT-2008-0001
                                                             JPCERT/CC
                                                       January 9, 2008

                 <<< JPCERT/CC Alert 2008-01-09 >>>

                 Jan 2008 Microsoft Security Bulletin
                    (including one critical patch)

             http://www.jpcert.or.jp/at/2008/at080001.txt

I. Overview

  Microsoft has released security bulletins for January 2008 which
include one "Critical" security update.

  Vulnerabilities of IGMPv3/MLDv2 used for IPv4/IPv6 multicast and
Router Discovery Protocol used to discover IPv4 routers have been announced.

  Exploitation of these vulnerabilities could allow a remote attacker
to cause a Denial of Service (DoS) condition or execute arbitrary code.

    Security Bulletin for January 2008
    http://www.microsoft.com/japan/technet/security/bulletin/ms08-jan.mspx

  Detailed information on this vulnerability is available from the
following URL:

  [Critical Security Updates]

    MS08-001
    Vulnerabilities in Windows TCP/IP Could Allow Remote Code 
      Execution (941644)
    http://www.microsoft.com/japan/technet/security/bulletin/ms08-001.mspx


II. Solution

  Apply the security updates immediately by using Microsoft Update or
Windows Update.

    Microsoft Update
    https://www.update.microsoft.com/

    Windows Update
    https://windowsupdate.microsoft.com/


III. Reference Information

    Security Bulletin for January 2008
    http://www.microsoft.com/japan/technet/security/bulletin/ms08-jan.mspx

    US-CERT Technical Cyber Security Alert TA08-008A
    Microsoft Updates for Multiple Vulnerabilities
    http://www.us-cert.gov/cas/techalerts/TA08-008A.html

    US-CERT Vulnerability Note (search by ms08-jan)
    http://www.kb.cert.org/vuls/byid?searchview&query=ms08-jan

    @police
    About Microsoft security updates
    (MS08-001, 002) (January 9)
    http://www.cyberpolice.go.jp/important/2008/20080109_070834.html

  If you have any information regarding this matter, please contact
us.

======================================================================
JPCERT Coordination Center (JPCERT/CC)
MAIL: info@jpcert.or.jp
TEL: 03-3518-4600  FAX: 03-3518-4602
http://www.jpcert.or.jp/