If you have been following security news lately you may have already heard about the Duqu rootkit that combines the technology of the Stuxnet rootkit with a backdoor trojan and keylogger. Duqu has been discovered on October 18 and infection reports have started to come in soon thereafter. Not all security suites and products detect [...]

Categories: Security, Software, Windows

A new 0-day vulnerability has been confirmed yesterday. The vulnerability affects all client and server versions of Microsoft Windows up to and including Windows 7 and Windows Server 2008 R2. Security Advisory 2501696 reveals that the “vulnerability exists due to the way MHTML interprets MIME-formatted requests for content blocks within a document” and that it [...]

Categories: Browsing, Internet Explorer, Security, Windows

Microsoft today released a new out of band security bulletin addressing a vulnerability in ASP.NET that affects all versions of the Microsoft .Net Framework when used on Windows Server operating systems, or on client systems that run a web server from their computer. While that excludes the majority of desktop users, it may still affect [...]

Categories: Security, Windows

The recently discovered DLL hijack vulnerability in Windows appears to be more critical than thought. Up until now it was confirmed that Windows would load dlls from the current working directory if they cannot be found in directories with a higher search priority. This in turn meant that attackers had to use a dll unknown [...]

Categories: Security, Windows

A new Windows vulnerability was made public in the end of August, which could allow remote code execution on a computer system. The issue is caused by programs and applications that use insecure programming practices. According to various researchers at least 40 popular applications are affected by the vulnerability. New users who want to read [...]

Categories: Security, Software, Windows

A vulnerability was recently discovered in Microsoft Windows operating systems that exploits the default dll loading behavior. A Microsoft Security Advisory explains that the “issue is caused by specific insecure programming practices that allow so-called binary planting or DLL preloading attacks”. In simple terms: Applications that do not use qualified paths for external dynamic link [...]

Categories: Security, Windows

A recently discovered vulnerability in Windows Shell allows remote code execution on affected computer systems if exploited correctly. A security advisory that was posted yesterday on Microsoft’s Technet website confirms limited, targeted attacks that are exploiting a vulnerability in Windows Shell and the parsing of .lnk files. Attackers could exploit the vulnerability to infect Windows [...]

Categories: Security, Windows

A vulnerability in Windows Help and Support Center was discovered recently that could allow remote code execution on affected systems. Only Windows XP and Windows Server 2003 are affected by it. Microsoft is aware of limited targeted attacks that exploit the vulnerability. These attacks use specially crafted links on web pages or email messages with [...]

Categories: Security, Windows

The Microsoft Security Response team published a security advisory yesterday. The team is investigating a publicly reported vulnerability that is affecting 64-bit editions of Windows 7 and Windows Server 2008 R2 as well as Windows Server 2008 R2 for Itanium systems. The vulnerability was discovered in the Windows Canonical Display Driver (cdd.dll) which is used [...]

Categories: Security, Windows