Exploits already out for 6.13.06 MS Patches

FYI…

- http://isc.sans.org/diary.php?storyid=1415
Last Updated: 2006-06-14 11:31:15 UTC
"After yesterday's patchday, we start to receive a number of reports about newly released exploits for vulnerabilities announced on Tuesday. Here a quick lists of what we have seen so far:

MS06-024: Windows Media Player.
Exploit released by penetration testing vendor to customers.

MS06-025: RRAS
Exploit released by penetration testing vendor to customers.

MS06-027: Word remote code execution
Exploit available -before- release of patch.

MS06-030: SMB Priviledge Escalation.
Two exploits released to the public.

MS06-032: IP Source Routing Exploit.
DoS exploits released privately (trivial exploit) …"

FYI…

- http://www.techweb.com/article/printableAr…_section=700028
June 14, 2006 (5:41 PM EDT)
"Although security experts said Tuesday that the previous day's patching of 21 Microsoft vulnerabilities shouldn't present users with any major threats, closer examination of the updates a day later indicates different. Exploits or proof-of-concept code samples are already available for more than a third of the patched bugs… VeriSign iDefense also noted that almost 20 percent (4 out of 21) of the patches fixed bugs that had previously been disclosed in public forums. Two of the four went public in May and one in April, but the fourth harks back to December 2005…"