« New Phishing Fighter | Main | Master the Password »
October 05, 2006Patches and Patch Adams
Microsoft, which has been downplaying a recently discovered VML (vector markup language) vulnerability, has "rush released" a patch to resolve the problem, making one believe that it was more critical then they let on. The vulnerability primarily targets those who are logged on that have full administrative rights, and an attacker could gain complete control over an affected system where they could install programs, view, change, or delete data, and even create new accounts with full rights. Users without full rights are less vulnerable, and now that zero-day attacks have become a real possibility, Microsoft recommends that the update is applied immediately. You can download the update here.
Also, the Patch Adams in the title refers to the reported Javascript flaw in Mozilla, which was announced by two presenters at the ToorCon hacking convention in San Diego, was, like the doctor who healed through humor, actually intended as a joke. Said the 19 year old Mischa Spiegelmock, "The main purpose of our talk was to be humorous...the code we presented did not in fact do this, and I personally have not gotten it to result in code execution, nor do I know of anyone who has."
Posted by pschooff in
Microsoft
• Patches
|
Digg This|
Add to del.icio.us
Trackback Pings
TrackBack URL for this entry:
http://www.ebizq.net/mt/mt-tb.cgi/772


Twenty-Four Seven Security