Four New Unpatched Windows Vulnerabilities
peeon writes "Right before Christmas, four new Windows NT/2k/XP vulnerabilities were posted to the Bugtraq list. This story discusses two of the vulnerabilities in the LoadImage function (buffer overflow) and Windows Help program (heap overflow), but the Chinese company discovered two more exploits in the parsing of a specially crafted ANI file (causes DoS). A Bugtraq posting has more details."
Hmmm, so windows has bugs in it. Surprise surprise. Merry Christmas everyone. In Soviet Russia, Windows Exploits you...oh wait...
My Favourite Meme
But does it have a faraday cage so the data doesnt escape? And.. Can it be compiled for SkyOs?
Ah, this is yet another example of hack journalism. They missed another bug that I just had to fix on an XP box today It's a vunerability in the win.ini file- it runs a harmful program called 'Explorer.exe'. The best kind of horse to beat is a dead one...
Sorry, too much penguin-eggnog.
when corporate computer use is at a minimum?
Not in my office... our mailserver just went down due to a large number of 'seasonal' flash attachments coming and going out and PHB OutOfOffice AutoReplies. I can just see the SysAdmin's tears shorting out the domain controller as we speak....
My Favourite Meme
Funny you should mention that, my father still uses Windows 98 and netscape 3, and never runs into any problems. So much for progress eh?
Will they allow me to install Linux once i 0wn the machine?
Please correct me if I got my facts wrong.
Merry Christmas... from all the people at Microsoft. Buffer overflows for everyone this year ;)
Silent night, holey night,
All is calm, all is bright,
Round yon virgin PC and screen,
Holey computer, so exploitable and keen,
Sleep with spyware downloading,
Sleep with spyware downloading.
-=test-sig_0.1.5(NoWhitespaceVersion)=-
You're lucky. I cherish the moment they want me to fix their PC. That way I don't have to listen to all the other drunken idiots.
I still can't get the screen shots of Castle Wolfenstein for the Apple IIe out of my head.
You managed to.
One line blog. I hear that they're called Twitters now.
...are the bugs digitally signed?
I've tested all of the vulnerabilities on Windows 2000 and they did nothing!! I'm invincibNOCARRIER
It sure is a good thing Microsoft digitally signs everything. Clearly they are lightyears ahead of open-source in terms of security.
Twas the morn be for Christmas and all through the cage.
Not a creature was stirring not even a 10th level mage.
Then Flash, i look at my bookmarks and what did appear!?
A story on slashdot spreading with fear.
"Peril Peril", It screamed with fervor and fight.
"What shall we do about this vulnerability tonight?"
It's christmas eve and in the story lay more,
For this affected Santa and hurt him to the core.
His Server Used Exchange to give and recieve,
a malicious cracker got in to make Santa Grieve.
The clean cut elves said format and reinstall, while the ones with long beards solved it in no time at all.
"There will be no Christmas this year" Santa Said with dismay.
The naughty and nice list was lost in the fray.
And yet with precision and care the elves brought out from back,
santas new gift! a blade server rack!
"It runs Linux in fact!" said the elves in unison
"cron jobs too, back up that old piece of Sh.."
one interupted "Stop it Sam",
So christmas would go on with ease and ablitity, that is until santa went on his killing spree.
The End
No worries there, I have an IBM model M keyboard that'd drop them in their tracks, but it'd never be clean again. And the disposable keyboards just don't pack the wallop to down a full-grown spammer. Your best bet is to set up a ramp to a camouflaged log chipper and lure them in with calls like "I need a mortgage", "I want v14gr4!", "I want to invest in Nigeria". Works like a charm!
One line blog. I hear that they're called Twitters now.
Uzi is fine. But when he shows you his monkey dance then you know youre in deep trouble.
Especially when he sits on you afterwards.
ich bin der musikant
mit taschenrechner in der hand
kraftwerk