July 2005

MAS has reviewed the Microsoft Security Updates and found none are critical to the operation of RALS products. This security bulletin (patch) below will be included in the next product release. The list of the updates is as follows:

MS05-035 - Critical

Vulnerability in Microsoft Word Could Allow Remote Code Execution (903672)

MS05-036 - Critical

Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution (901214)

MS05-037 - Critical

Vulnerability in JView Profiler Could Allow Remote Code Execution (903235)

Microsoft rates some of these as 'critical' but the vulnerabilities may in fact pose no risk to the RALS system if customers adhere to the intended use of RALS.

Medical Automation Systems reviews all Microsoft security patches when they are released. No problems with the RALS systems have been found by our internal testing or reported by customers following the application of these security updates. The application of these updates to the standard RALS system configuration has been approved. Microsoft rates some of these as 'critical' but the vulnerabilities may in fact pose no risk to the RALS system if customers adhere to the intended use of RALS.

MS Patches NOT Critical to RALS Functionality If MAS determines that the vulnerability as described in a Microsoft bulletin should not adversely affect the RALS functionality when the system is used as intended, the security patch will be tested and included in the next routine product version release. Should the user apply the patches, MAS cannot guarantee or warrant its operation or impact on the RALS system. In this situation there will be no routine customer notification.

MS Patches Critical to RALS Functionality If it is determined that the security vulnerability as described in a Microsoft bulletin is critical to the RALS functionality, MAS will notify customers via a broadcast email from SecurityUpdates@rals.com and by notice on the MAS website http://www.rals.com .

RALS-Plus I RALS-Web I RALS-eQuiz I RALS-TGCM I RALS-Report I Device Interfacing
Customer Support I Clinical Questions I MS Vulnerabilities I MS Updates I RRC Password of the Day
RRC Installation I RALS-Dataports I MAS News I About MAS I Case Studies
Contact Us I POC Links I Home I Legal Notice