Week ago the UK group “Computer Terrorism” released a proof of concept exploit against patched versions of Internet Explorer. Microsoft is investigating this report of a vulnerability in Microsoft Internet Explorer on Microsoft Windows 98, on Windows 98 Second Edition, on Windows Millennium Edition, on Windows 2000 Service Pack 4, on Windows XP Service Pack

A proof of concept (PoC) exploit was released against systems vulnerable to MS05-051. MS05-051 was released in October. The vulnerability does allow for arbitrary code execution in systems with the Microsoft Distriuted Transaction Coordinator (MSDTC) enabled. In order to disable MSDTC, enter the following command: sc stop MSDTC & sc config MSDTC start= disabled By

This year’s SANS Top 20 Internet Security Vulnerabilities were announced this morning. Details are at http://www.sans.org/top20. You will see that the format has changed a bit this year. Top Vulnerabilities in Windows Systems W1. Windows Services W2. Internet Explorer W3. Windows Libraries W4. Microsoft Office and Outlook Express W5. Windows Configuration Weaknesses Top Vulnerabilities in

the UK group “Computer Terrorism” released a proof of concept exploit against patched versions of Internet Explorer. We verified that the code is working on a fully patched Windows XP system with default configuration. The bug uses a problem in the javascript ‘Window()’ function, if run from ‘onload’. ‘onload’ is an argument to the HTML

A potential vulnerability in Windows 2000 Service Pack 4 and Windows XP Service Pack 1 has been publicly revealed by the French Security Incident Response Team. The organisation has drawn the ire of Microsoft by publishing details of a proof-of-concept exploit that targets the vulnerability. According to the author, a specially crafted request to upnp_getdevicelist

A user visited a webpage and got redirected to hxxp://iframebiz.biz/dl/adv443.php (tt changed to xx to protect anyone from getting there…) Among other things… the page was obfuscated and many malicious bits of software loaded through javascript…. such as hxxp://iframebiz.biz/dl/adv443/sploit.anr and hxxp://iframebiz.biz/dl/loadadv443.exe and hxxp://iframebiz.biz/dl/adv443.hta and some sort of loaderadv443.jar and… http://iframebiz.biz/dl/adv443/x.chm It looks like a bunch