1258 matches found
Microsoft Takes Aim at Malvertising Threat
Less than a week after a malicious advertising attack against the New York Times ad servers, Microsoft filed five civil lawsuits against companies allegedly using online advertising to serve malware. The lawsuits allege that individuals using the business names “Soft Solutions,” “Direct Ad,”...
Microsoft Windows Kernel win32k.sys Privilege Escalation Vulnerability
Windows XP/2003 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
DISPUTED The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location. NOTE:...
CVE-2009-2653
Summary: CVE-2009-2653 affects Microsoft Windows XP (SP2/SP3) and Windows Server 2003 (pre-SP1) due to a flaw in the NtUserConsoleControl function in win32k.sys. The OpenVAS and related records describe a local privilege-escalation vulnerability in win32k.sys, enabling an administrator to elevate...
Gartner Sees Better Days Ahead For Security Budgets
From SearchSecurity.com Robert Westervelt The dismal economy has put the brakes on a lot of security projects, but the need to maintain the basics and automate some security functions has fueled interest in managed security services and some specific security areas, according to analysts at Gartn...
How to Avoid Scareware Attacks
From Just Ask Gemalto Dennis Fisher Computer users have been conditioned over the last few years to recognize and avoid many of the more common scams and threats on the Internet: email viruses, phishing, spam, Nigerian 419 ploys and work-at-home money-mule schemes. You know that an email promisin...
Prediction: Apple will recommend security software
From CNet Jon Oltsik As an analyst, it is my job to follow the industry, internalize trends, and then use this information to make predictions. OK, here goes: Within the next 18 months, Apple will begin recommending that Macintosh users install Internet security software on all systems. Now I...
Microsoft: Rogue security software fastest-growing online threat
Trojan downloaders and malware that masquerades as security software are the two fastest growing threats on the Web right now, according an analysis by Microsoft’s Malware Protection Center. In its latest Software Intelligence Report, released on Wednesday, the MMPC found that a Trojan downloader...
New ransomware holds Windows files hostage, demands $50
By Gregg Keizer, Computerworld Cybercrooks have hit on a new twist to their aggressive marketing of fake security software, and are duping users into downloading a file utility computerworld.com that holds users’ data for ransom, security researchers warned today. While so-called “scareware” has...
Attack Trojans-remote control software of its own vulnerability to your attention?-vulnerability warning-the black bar safety net
Two days before the RSA conference, there was a guy named Joel Eriksson researchers show how to attack the Trojansespecially Trojan control terminalto control the“hacker”. blog.wired.com/27bstroke6/2008/04/researcher-demo.html Eriksson found one in the Celestial Empire one of the more popular...
CVE-2008-5409
The connected advisories confirm a memory corruption/DoS vulnerability in BitDefender/pdf.xmd that processes PDF streams (e.g., FlateDecode/ASCIIHexDecode). Affects BitDefender products using the pdf.xmd plugin (BitDefender Free Edition 10, Antivirus Standard 10; BullGuard Internet Security 8.5; ...
xKungfoo on the net horse obscene skill-vulnerability warning-the black bar safety net
Author: cosine Today xKungfoo on the last day, G in the above a hung it to a chain of issues. Some hung it to the obscene tricks did not say in detail, where disclosed. In fact, some nothing, is the skill, some people also played. The first one, clipboard hijacking hung it to the This is actually...
MapCal - The Mapping Calendar (v. 0.1) Remote SQL Injection
/ / / / / | | | | / / ||| | | | | | | | | | / | | | | | | || | / | | || | / / / |/ / / / MapCal - The Mapping Calendar v. 0.1 Remote SQL Injection Author: 0x90 HomePage: www.0x90.com.ar Contact: Gunsat0x90dotcomdotar Script: MapCal - The Mapping Calendar site: http://mapcal.sourceforge.net...
Teach you clever with a text editor find system vulnerabilities-vulnerability warning-the black bar safety net
Although Kaspersky, rising and other security software can help us to find the vulnerabilities, but today the editor to introduce a method to find loopholes in the new method: use a hexadecimal editor to find the vulnerability. A hex Editor can be used to check and repair various files, recover...
Attack Trojans-remote control software of its own vulnerability to your attention?-vulnerability warning-the black bar safety net
from:sowhat blog Two days before the RSA conference, there was a guy named Joel Eriksson researchers show how to attack the Trojans, particularly the Trojan control terminalto control the“hacker”. blog.wired.com/27bstroke6/2008/04/researcher-demo.html Eriksson found one in the Celestial Empire on...
Kill KV 2 0 0 8, Rising, etc. most of the mollusc-vulnerability warning-the black bar safety net
Article author: sudami [email protected] Information source: evil octal information security team www.eviloctal.com） Original source: http://hi.baidu.com/sudami/blog/item/a0f114dac68fe3dfb6fd481a.html Preface: Writing this article is not to spread the virus technology,but for the majority of compute...
HP Software Updates ActiveX unauthorized access
Unsafe SaveToFile method allows access to filesystem...
Mozilla Forefox jar: URL crossite scripting
It's possible to fire crossite scripting attack via jar: protocol by uploading JAR, DOC, ZIP, etc files...
Plague in (security) software drivers & BSDOhook utility
Hello, We have found number of vulnerabilities in implementations of SSDT hooks in many different products. Vulnerable software: BlackICE PC Protection 3.6.cqn G DATA InternetSecurity 2007 Ghost Security Suite beta 1.110 and alpha 1.200 Kaspersky Internet Security 7.0.0.125 Norton Internet Securi...