June 4th, 2003, 09:17 PM
Internet Explorer Buffer Overrun
Microsoft released Critical Security Bulletin MS03-020 today. It is a cumulative patch for Internet Explorer that addresses some "new" flaws:
A buffer overrun vulnerability that occurs because Internet Explorer does not properly determine an object type returned from a web server. It could be possible for an attacker who exploited this vulnerability to run arbitrary code on a user's system. If a user visited an attacker’s website, it would be possible for the attacker to exploit this vulnerability without any other user action. An attacker could also craft an HTML email that attempted to exploit this vulnerability.
If you are running Internet Explorer you should download the patch and apply it ASAP.
A flaw that results because Internet Explorer does not implement an appropriate block on a file download dialog box. It could be possible for an attacker to exploit this vulnerability to run arbitrary code on a user's system. If a user simply visited an attacker’s website, it would be possible for the attacker to exploit this vulnerability without any other user action. An attacker could also craft an HTML email that attempted to exploit this vulnerability.
Click here to download patch
June 4th, 2003, 09:31 PM
Yippee!!! Another fun day of patching...
Thanx for the heads up! At least this keeps me with a job...
is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.
June 4th, 2003, 09:41 PM
Ahhh man, I just got finished approving the last round of Micro$oft patches. Looks like it's gonna be another long evening.
Our scars have the power to remind us that our past was real. -- Hannibal Lecter.
Talent is God given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful. -- John Wooden