The Active Network
ActiveMac Anonymous | Create a User | Reviews | News | Forums | Advertise  
 

  *  

  Microsoft Security Bulletin Summary for August 2011
Time: 10:25 EST/15:25 GMT | News Source: ActiveWin.com | Posted By: Robert Stein
  • Cumulative Security Update for Internet Explorer (2559049) This security update resolves five privately reported vulnerabilities and two publicly disclosed vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. An attacker who successfully exploited any of these vulnerabilities could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
  • Vulnerabilities in DNS Server Could Allow Remote Code Execution (2562485) This security update resolves two privately reported vulnerabilities in Windows DNS server. The more severe of these vulnerabilities could allow remote code execution if an attacker registers a domain, creates an NAPTR DNS resource record, and then sends a specially crafted NAPTR query to the target DNS server. Servers that do not have the DNS role enabled are not at risk.
  • Vulnerability in Data Access Components Could Allow Remote Code Execution (2560656) This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a legitimate Excel file (such as a .xlsx file) that is located in the same network directory as a specially crafted library file. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
  • Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2560978) This security update resolves two privately reported vulnerabilities in Microsoft Visio. The vulnerabilities could allow remote code execution if a user opens a specially crafted Visio file. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
  • Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2560978) This security update resolves two privately reported vulnerabilities in Microsoft Visio. The vulnerabilities could allow remote code execution if a user opens a specially crafted Visio file. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
  • Vulnerability in Remote Access Service NDISTAPI Driver Could Allow Elevation of Privilege (2566454) This security update resolves a privately reported vulnerability in all supported editions of Windows XP and Windows Server 2003. This security update is rated Important for all supported editions of Windows XP and Windows Server 2003. Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 are not affected by the vulnerability. The vulnerability could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application designed to exploit the vulnerability and take complete control over the affected system. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.
  • Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2567680) This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application designed to send a device event message to a higher-integrity process. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.
  • Vulnerabilities in TCP/IP Stack Could Allow Denial of Service (2563894) This security update resolves two privately reported vulnerabilities in Microsoft Windows. The vulnerabilities could allow denial of service if an attacker sends a sequence of specially crafted Internet Control Message Protocol (ICMP) messages to a target system or sends a specially crafted URL request to a server that is serving Web content and has the URL-based Quality of Service (QoS) feature enabled.
  • Vulnerability in Remote Desktop Protocol Could Allow Denial of Service (2570222) This security update resolves a privately reported vulnerability in the Remote Desktop Protocol. The vulnerability could allow denial of service if an affected system received a sequence of specially crafted RDP packets. Microsoft has also received reports of limited, targeted attacks attempting to exploit this vulnerability. By default, the Remote Desktop Protocol (RDP) is not enabled on any Windows operating system.
  • Vulnerability in Microsoft Chart Control Could Allow Information Disclosure (2567943) This security update resolves a privately reported vulnerability in ASP.NET Chart controls. The vulnerability could allow information disclosure if an attacker sent a specially crafted GET request to an affected server hosting the Chart controls. Note that this vulnerability would not allow an attacker to execute code or to elevate the attacker's user rights directly, but it could be used to retrieve information that could be used to further compromise the affected system. Only web applications using Microsoft Chart Control are affected by this issue. Default installations of the .NET Framework are not affected.
  • Vulnerability in Microsoft Report Viewer Could Allow Information Disclosure (2578230) This security update resolves a privately reported vulnerability in Microsoft Report Viewer. The vulnerability could allow information disclosure if a user views a specially crafted Web page. In all cases, however, an attacker would have no way to force a user to visit the Web site. Instead, an attacker would have to persuade a user to visit the Web site, typically by getting them to click a link in an e-mail message or Instant Messenger message that takes the user to the vulnerable Web site.
  • Vulnerability in Windows Kernel Could Allow Denial of Service (2556532) This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if a user visits a network share (or visits a Web site that points to a network share) containing a specially crafted file. In all cases, however, an attacker would have no way to force a user to visit such a network share or Web site. Instead, an attacker would have to convince a user to do so, typically by getting the user to click a link in an e-mail message or Instant Messenger message.
  • Vulnerability in .NET Framework Could Allow Information Disclosure (2567951) This security update resolves a privately reported vulnerability in Microsoft .NET Framework. The vulnerability could allow information disclosure if a user views a specially crafted Web page using a Web browser that can run XAML Browser Applications (XBAPs). In a Web-based attack scenario, an attacker could host a Web site that contains a Web page that is used to exploit this vulnerability. In addition, compromised Web sites and Web sites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit this vulnerability. In all cases, however, an attacker would have no way to force users to visit these Web sites. Instead, an attacker would have to convince users to visit the Web site, typically by getting them to click a link in an e-mail message or Instant Messenger message that takes users to the attacker's Web site. This vulnerability could also be used by Windows .NET applications to bypass Code Access Security (CAS) restrictions.
Write Comment
Return to News

  Displaying 426 through 431 of 431
Prev | First
  The time now is 10:51:13 AM ET.
Any comment problems? E-mail us
#426 By 4240821 (193.160.216.96) at 2/9/2025 10:28:01 PM
https://hotpic.cc/album/WASO9Kp0ppM10
https://hotpic.cc/album/qL3VfJBMu08de
https://hotpic.cc/album/CnVtDPfBNqR4U
https://hotpic.cc/album/GCWHDeYO4jd2J
https://hotpic.cc/album/KCbo3uJWKykm0
https://hotpic.cc/album/330GORd2zUrjA
https://hotpic.cc/album/K8GtwBCf4re7b
https://hotpic.cc/album/LyTJdBG9kswJ1
https://hotpic.cc/album/pEJkbGMnNmfaw
https://hotpic.cc/album/rNBEiMokhYDp3

#427 By 4240821 (142.111.253.203) at 2/10/2025 4:14:56 PM
https://hotpic.cc/album/emUNapkQwaJ7g
https://hotpic.cc/album/TH0u75p6NOe8v
https://hotpic.cc/album/4TAe8wsTHO56j
https://hotpic.cc/album/jAoGqz3ErxAVF
https://hotpic.cc/album/17qhN0EAz4B4n
https://hotpic.cc/album/YvgS70eQ8t4VO
https://hotpic.cc/album/ZwqA9TRKVvhcs
https://hotpic.cc/album/yy8ypGAzidtax
https://hotpic.cc/album/1F4Np3xK7rUHT
https://hotpic.cc/album/aMf3AEkNHZDh1

#428 By 4240821 (193.36.231.79) at 2/10/2025 10:45:59 PM
https://hotpic.cc/album/UTcp5aWyDw5RA
https://hotpic.cc/album/fSUnelp7kHqNM
https://hotpic.cc/album/zZiXpYuVCQOua
https://hotpic.cc/album/yUTJrIgUBuaR7
https://hotpic.cc/album/u8xzsT3INpe3R
https://hotpic.cc/album/JKTwANB0C8yf1
https://hotpic.cc/album/ZQd6acy4vd2Zf
https://hotpic.cc/album/InwWh8eBgV8Zm
https://hotpic.cc/album/VwZVBV1GRACXu
https://hotpic.cc/album/haCanDJouFV1i

#429 By 4240821 (142.252.107.167) at 2/11/2025 2:51:41 PM
https://hotpic.cc/album/ct7m19jKs8Rnz
https://hotpic.cc/album/bHTIgXlc80YSV
https://hotpic.cc/album/ZohDJKIsrLsKe
https://hotpic.cc/album/K3M0QVrYOpK5E
https://hotpic.cc/album/L5s51yeuJUDh9
https://hotpic.cc/album/tTao5TxBNm5NN
https://hotpic.cc/album/Sm8ed2Zxhkbbr
https://hotpic.cc/album/ZIomRDod4kn3A
https://hotpic.cc/album/9kQv0mvDpascP
https://hotpic.cc/album/bDpw7hAgOYAPn

#430 By 4240821 (166.1.149.27) at 2/12/2025 3:28:04 PM
https://hotpic.cc/album/CR2tHfKH3HKA3
https://hotpic.cc/album/pEJvTuPDlWcev
https://hotpic.cc/album/2qrtBI2nFv3HI
https://hotpic.cc/album/JLE6vLsp1ED6u
https://hotpic.cc/album/30JUzLWVY3lS9
https://hotpic.cc/album/MViVzzTmstYY1
https://hotpic.cc/album/Ksj2u2q6QCngx
https://hotpic.cc/album/wiH3WlvDxecel
https://hotpic.cc/album/0t1BqKBdO1EIB
https://hotpic.cc/album/JZNDXPgMblix6

#431 By 4240821 (193.228.48.158) at 2/13/2025 12:02:32 AM
https://hotpic.cc/album/4bdXwM2J2ln9F
https://hotpic.cc/album/uETIhZXr8NmGY
https://hotpic.cc/album/sYwddKXpe8v7t
https://hotpic.cc/album/ucd5tUWryzmNB
https://hotpic.cc/album/zJ1qubutO7nkZ
https://hotpic.cc/album/skqJAWKtHco2m
https://hotpic.cc/album/ImzcGijwQR45j
https://hotpic.cc/album/CyP8Xb4mvaNz7
https://hotpic.cc/album/o1Evq3YsAS7Gv
https://hotpic.cc/album/2PhZOcr3MhASP

Write Comment
Return to News
  Displaying 426 through 431 of 431
Prev | First
  The time now is 10:51:13 AM ET.
Any comment problems? E-mail us
User name and password:

 

  *  
  *   *