Slashdot Mirror
Ten Security Bulletins From Microsoft
wschalle writes "Microsoft has released 10 "new" security bulletins, including one pertaining to a vulnerability in the Windows Shell, apparently exploitable via the web. The shell vulnerability only allows code execution as the user viewing the malicious web site. Aren't you glad your shell is web-enabled? The recent GDI+ vulnerability is re-released here as well as a vulnerability in zip compression handling."
....Win2k patched fine. Another Tuesday Patch roulette over with....
I was just about to write a pro MS defence post to stave off the oncoming attack. I just re-read the article. I quit.
Ok, Now is a really web enabled experience! :)
What's in a sig?
The recent GDI+ vulnerability
Good thing I choose to join NOD.
/rimshot
-------
Support Indy Music. Buy
I think the first link on the page referenced above says it all:
Want Less Technical Detail?
I can think of a more comprehensive bulletin:
1. Internet Explorer (All versions)
2. Microsoft Office (All versions)
3. Microsoft Windows OS (All versions)
Si tacuisses philosophus mansisses. If you had kept quiet, you would have remained a philosopher.
Please select your argument here:
[ ] MS has these security exploits because it is the biggest OS
[ ] MS is a steaming pile when it comes to security
[ ] MS is working on fixing these things, and is doing the responsible thing.
[ ] 1337! I can't wait to #4x0r!
Wow now these are guys I can trust!
Are Windows 98, Windows 98 Second Edition, or Windows Millennium Edition critically affected by any of the vulnerabilities that are addressed in this security bulletin?
No. None of these vulnerabilities are critical in severity on Windows 98, on Windows 98 Second Edition, or on Windows Millennium Edition. For more information about severity ratings, visit the following Web site.
Don't sweat it, a remotely exploitable shell is
not critical!
Got Code?
I thought XP is the safest and most secure version yet! That's what all the commercials and the blue installation screens say.
Does this mean that my potential (and therefore their passion) is full of security holes?
If you don't know what AltaVista is (was), get off my lawn.
and (on my page) a microsoft windows server 2003 advertisement right below this article.
beautiful. fucking beautiful.
This sig contains repetition and redundancy.
"The best thing about Microsoft bugs is that there are so many to chose from..."
Nasty hacker crafts email that appears to be from
microsoft talking about this great new software that can be downloaded from their site. Of course mindless MCSE network admin does not realize it is a phishing attack and clicks to see the greatest new stuff from the redmond lords. Now nasty hacker owns your entire network......priceless
Got Code?
Updates were unable to be successfully installed
.NET Framework 1.1 Service Pack 1
The following updates were not installed:
Microsoft
Cumulative Security Update for Internet Explorer for Windows XP Service Pack 2 (KB834707)
[Configure automatic updates] [Tough shit]
Thanks, Microsoft! What the hell am I supposed to do now! Oh well, this particular machine hasn't been installed for almost 1 year, it's about time I reset the cruft factor...
That's what I get for having faith in you, Microsoft!
We should all be nice to Microsoft because they would never bug their competitors' hotel rooms, perjure themselves in court, open their source code to China while claiming in court that opening it would damage national security, sabotage their competitors' applications by changing their API's, or promise delivery dates that they know they cannot meet in order to starve their competition. Everyone knows Linus does that kind of stuff all the time.
actually, parent is my brother(that sentence sounds weird); I just want to make sure his comment is public so he has to carry through with it ;)
When confronted with a new Microsoft security hole, which seems to one to have existed for a while, possibly leaving his entire organization at risk, one should never react with surprise or horror.
One must make a FRIEND of the horror.
Then, one can hear about the security issue, nod sagely with a wan smile, and whisper to the junior IT staff, "But of COURSE there is a hole. This is to be expected, young one. Run and patch, then we'll go to lunch."
Bonus points for leaning back in one's chair, folding one's hands across one's belly, and sighing loudly before addressing the novice.
Farewell! It's been a fine buncha years!
MS10-01: Vulnerability in Internet Explorer may cause user to worship other gods.
MS10-02: Buffer overrun in Graven Image processing.
MS10-03: Vulnerability in RPC Service may cause the name of the Lord to be taken in vain.
MS10-04: Vulnerability in Task Scheduler may prevent computer from resting on the Sabbath Day.
MS10-05: Vulnerability in Windows Shell may allow child process to kill parent process.
MS10-06: Buffer overrun in DCE Locator Service may cause abnormal program termination.
MS10-07: Vulnerability in Outlook/Outlook Express may lead to adultery.
MS10-08: Vulnerability in MSKerberos may allow remote user to steal.
MS10-09: Vulnerability in Excel may allow workbooks or spreadsheets to bear false witness.
MS10-10: Vulnerability in Internet Explorer may cause user to covet neighbor's ass.
k.
"In spite of everything, I still believe that people are really good at heart." - Anne Frank
I did it and I got a free iPod!
Sleep is futile.
Not if it's running Windows - then it'll be full of holes! /rimshot
Breaking Into the Industry - A development log about starting a game studio.
they are called exoskeletons.
See my journal, I write things there