Microsoft computer security

rkeith | 7 Jun 2007 14:15

SecurityFocus Microsoft Newsletter #345

SecurityFocus Microsoft Newsletter #345
----------------------------------------

This Issue is Sponsored by: Norwich University

Norwich University's Master of Science in Information Assurance Program compliments the skills of
information security professionals while preparing them to take on management roles in an
organization-wide information security program, such as Chief Security Officers, Security
Administrators and Chief Information Security Officers. This 18 month program is conveniently
delivered online and is accredited by The National Security Agency and Department of Homeland Security
as a "Center for Academic Excellence in Information Assurance Education"

For more information, visit http://www.msia.norwich.edu/msec

SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as conveying topics of interest for our
community. We are proud to offer content from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I. FRONT AND CENTER
1. Security Analogies
2. Your Space, My Space, Everybody's Space
II. MICROSOFT VULNERABILITY SUMMARY
1. Computer Associates ARCserve Backup Multiple Unspecified Remote Buffer Overflow Vulnerabilities
2. Microsoft Windows GDI+ ICO File Remote Denial of Service Vulnerability
3. Yahoo! Messenger Multiple Unspecified Remote Code Execution Vulnerabilities
4. MPlayer Multiple CDDB Parsing Buffer Overflow Vulnerabilities
5. Mozilla Firefox Beatnik Extension Remote Script Code Execution Vulnerability

(Continue reading)

headers

rkeith | 15 Jun 2007 14:18

SecurityFocus Microsoft Newsletter #346

SecurityFocus Microsoft Newsletter #346
----------------------------------------

This Issue is Sponsored by: SPI Dynamics

ALERT: "How A Hacker Launches A Cross-Site Scripting Attack"- White Paper
Cross-site scripting vulnerabilities in web apps allow hackers to compromise confidential
information, steal cookies and create requests that can be mistaken for those of a valid user!! Download
this *FREE* white paper from SPI Dynamics for a complete guide to protection!

https://download.spidynamics.com/1/ad/xss.asp?Campaign_ID=70160000000CsFU

SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as conveying topics of interest for our
community. We are proud to offer content from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I. FRONT AND CENTER
1. Embedded Problems
2. Security Analogies
II. MICROSOFT VULNERABILITY SUMMARY
1. Microsoft Office MSODataSourceControl ActiveX Control Buffer Overflow Vulnerability
2. OpenOffice RTF File Parser Buffer Overflow Vulnerability
3. RETIRED: Microsoft Internet Explorer Navigation Cancel Webpage Spoofing Vulnerability
4. Apple Safari for Windows Unspecified SVG Parse Engine Multiple Unspecified Vulnerabilities
5. Microsoft Windows CE .NET Compact Framework Components Multiple Vulnerabilities
6. TEC-IT TBarCode OCX ActiveX Control Arbitrary File Overwrite Vulnerability
7. Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability

(Continue reading)

headers

Nagareshwar Talekar | 19 Jun 2007 06:40

Interesting stuffs <at> SecurityXploded.com

Hi all,

  I have been writing couple of security tools and also working on
some of the interesting security stuffs. To share my work with the
community, I have started my personal security website
http://SecurityXploded.com

Here are some of the security tools that you may find useful

*) NetShareMonitor : It is the application to watch your shared files
from the intruders and thereby protect your shares from unauthorized
access.

        http://securityxploded.com/netsharemonitor.php

*) ProcHeapViewer : This is a fast heap enumeration tool which uses
much better technique than normal Windows heap API functions. Its very
useful tool for anyone involved in analyzing process heaps.

        http://securityxploded.com/ProcHeapViewer.php

I have written an article which uncovers the reason behind the slower
functionality of Windows heap functions. It also describes new
efficient way of enumerating process heaps based on reverse
engineering of Windows heap API functions. You can find the article
here.

         http://securityxploded.com/enumheaps.php

*) FireMaster :  This is the tool to recover Firefox master password.

(Continue reading)

headers

rkeith | 20 Jun 2007 14:19

SecurityFocus Microsoft Newsletter #347

SecurityFocus Microsoft Newsletter #347
----------------------------------------

This Issue is Sponsored by: VeriSign

Increase customer confidence at transaction time with the latest breakthrough in online security -
Extended Validation SSL from VeriSign. Extended Validation triggers a green address bar in Microsoft
IE7, which proves site identity. Learn more at:

http://clk.atdmt.com/SFI/go/srv0890000047sfi/direct/01/

SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as conveying topics of interest for our
community. We are proud to offer content from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I. FRONT AND CENTER
1. Embedded Problems
2. Security Analogies
II. MICROSOFT VULNERABILITY SUMMARY
1. Avaya 4602SW SIP Phone Security Bypass Vulnerability
2. Avaya One-X Desktop Edition SIP Header Denial Of Service Vulnerability
3. Avaya 4602SW SIP Phone Cnonce Parameter Authentication Spoofing Vulnerability
4. Nortel Networks PC Client Soft Phone SIP Message Parsing Module Denial of Service Vulnerability
5. RealNetworks GameHouse GHDLCTL.DLL ActiveX Control Multiple Buffer Overflow Vulnerabilities
6. AOL Instant Messenger SIP Invite Message Denial of Service Vulnerability
7. Nortel Networks PC Client Soft Phone Message Parsing Module Buffer Overflow Vulnerability
8. Avaya One-X Desktop Edition Phone SIP Remote Buffer Overflow Vulnerability

(Continue reading)

headers

rkeith | 28 Jun 2007 14:20

SecurityFocus Microsoft Newsletter #348

SecurityFocus Microsoft Newsletter #348
----------------------------------------

This Issue is Sponsored by: SPI Dynamics

ALERT: "How A Hacker Launches A Cross-Site Scripting Attack"- White Paper
Cross-site scripting vulnerabilities in web apps allow hackers to compromise confidential
information, steal cookies and create requests that can be mistaken for those of a valid user!! Download
this *FREE* white paper from SPI Dynamics for a complete guide to protection!

https://download.spidynamics.com/1/ad/xss.asp?Campaign_ID=70160000000CsFU

SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as conveying topics of interest for our
community. We are proud to offer content from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I. FRONT AND CENTER
1. Don't Be Evil
2. Persistence of data on storage media
II. MICROSOFT VULNERABILITY SUMMARY
1. CA BrightStor ARCserve Backup Server Unspecified Remote Code Execution Vulnerability
2. Conti FTP Server Large String Denial of Service Vulnerability
3. Wireshark Multiple Protocol Denial of Service Vulnerabilities
4. Avax Vector AvaxSWF.DLL ActiveX Control Arbitrary File Overwrite Vulnerability
5. GD Graphics Library Multiple Vulnerabilities
6. LiteWEB Web Server Invalid Page Remote Denial of Service Vulnerability
7. Key Focus Web Server Index.WKF Cross-Site Scripting Vulnerability

(Continue reading)

Mon	Tue	Wed	Thu	Fri	Sat	Sun

				1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30

1	March 2012
6	March 2011
22	February 2011
27	January 2011
16	December 2010
17	September 2010
30	July 2010
3	January 2010
9	November 2009
3	September 2009
11	August 2009
7	July 2009
3	June 2009
21	May 2009
5	April 2009
5	March 2009
5	February 2009
13	January 2009
4	December 2008
4	November 2008
5	October 2008
4	September 2008
5	August 2008
16	July 2008
39	June 2008
47	May 2008
7	April 2008
52	March 2008
27	February 2008
47	January 2008
6	December 2007
17	November 2007
6	October 2007
19	September 2007
52	August 2007
43	July 2007
5	June 2007
9	May 2007
57	April 2007
26	March 2007
46	February 2007
58	January 2007
62	December 2006
22	November 2006
32	October 2006
64	September 2006
118	August 2006
100	July 2006
70	June 2006
92	May 2006
97	April 2006
85	March 2006
19	February 2006
60	January 2006
71	December 2005
145	November 2005
62	October 2005
38	September 2005
87	August 2005
108	July 2005
134	June 2005
55	May 2005
116	April 2005
133	March 2005
109	February 2005
169	January 2005
96	December 2004
35	November 2004
135	October 2004
209	September 2004
70	August 2004
118	July 2004
68	June 2004
79	May 2004
45	April 2004
44	March 2004
69	February 2004
107	January 2004
56	December 2003
171	November 2003
143	October 2003
140	September 2003
178	August 2003
116	July 2003
133	June 2003
90	May 2003
107	April 2003
130	March 2003
147	February 2003
112	January 2003
62	December 2002
141	November 2002
64	October 2002
110	September 2002
215	August 2002
189	July 2002
68	June 2002
184	May 2002
340	April 2002
190	March 2002
1	April 2001