Computer Help Community

Community

Cyber Tech Help Community

New Tutorials

PC Tutorials

New Downloads

PC Downloads

Member Testimonials

Open Member Quote   I just finished installing Win 98 SE on my wifes new computer that I built for her (barebones). I searched the net for the best tutorials I could find. Guess where I found them- right here. Very detailed, very easy to follow, excellent - jmtjet  Close Member Quote
Member Testimonials
MY CYBER TECH HELP

LATEST TOPICS

Tech Help Community

Free Antivirus Scan

Free Virus Scan and a listing of the top 10 viruses in the wild - Free Antivirus Scan
Free Online Antivirus Scan

File Extension Database

Find what program a filetype belongs to in our searchable File Extension Database.
File Extension Database

Services

See what services Cyber Tech Help can offer your business or website: CTH Services
CTH Services

Related MS Links

Related Links
Cyber Tech Help Community

To the top of the page to top

 



Exploit Wednesday follows MS Patch Tuesday

Latest News Latest News | News ArchiveNews Archive | Cyber Tech Help News RSS Feed!

Exploit Wednesday follows MS Patch TuesdayExploit Wednesday follows MS Patch Tuesday

Posted by: Tweaker
Date added: 08:55, 14th June 2007 GMT
Source: ZDNet News

Microsoft

Less than 24 hours after Microsoft shipped fixes for code execution holes in Internet Explorer and Windows, proof-of-concepts for remote exploits are popping up on the Internet.

On security mailings lists and at the Milw0rm.com site, there are at least three exploits circulating. These provide a roadmap for attackers to launch remote attacks to take complete control of an Windows machine.

Two of the three target gaping holes in the dominant Internet Explorer browser flaws that could be exploited by simply luring the target to surf to a Web page. (See exploit code here and here).

The vulnerabilities in the Microsoft Speech API ActiveListen and ActiveVoice ActiveX controls have been patched with the MS07-033 bulletin so its important to treat that update with the highest possible priority.

By convincing a user to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), an attacker may be able to execute arbitrary code with the privileges of the user. The attacker could also cause Internet Explorer (or the program using the WebBrowser control) to crash.

This patch applies to Internet Explorer 7 on Windows Vista.

Proof-of-concept code for a third exploit was released by Thomas Lim of COSEINC to provide technical details of of a critical flaw in the Secure Channel (Schannel) security package in Windows. This bug was patched with MS07-031.

Tools:  Tools: Post a comment | Link to this news item | Send to a friend | Submit News

 

Post a commentPost a comment

Error: You are not logged in.

In order to leave comments to news articles you must be a Cyber Tech Help Member.

Registration is completely free!  Register to become a member!  Register to become a member

Along with access to leave comments to news articles you will be able to ask any computing questions you might have on the Cyber Tech Help Forums.

 

[ To the top of the page To top | Latest News Latest News | News Archive News Archive | Cyber Tech Help News RSS Feed! ]