Login or Sign Up to become a member!
LessThanDot Site Logo

LessThanDot

A Technical Community for IT Professionals

Less Than Dot is a community of passionate IT professionals and enthusiasts dedicated to sharing technical knowledge, experience, and assistance. Inside you will find reference materials, interesting technical discussions, and expert tips and commentary. Once you register for an account you will have immediate access to the forums and all past articles and commentaries.

Browsing "security"

0

Windows 7 SP1 RTM available for MSDN and TechNet customers

If you are a TechNet or MSDN subscriber then you can download Windows 7 Service Pack 1 or Window Server 2008 R2 Service Pack 1 today.

Below is an image of what is available

If you have been patching your Windows 7 machine then you already…

Read More...
4

How To Modify The Host File In Windows 7 Or Vista

One way I stay protected from bad sites is that I use a modified host file. In Vista and Windows 7 you cannot just open the file in notepad and save it anymore, you will get an error. Someone had this happen at work on Windows Server 2008 last week and…

Read More...
0

Microsoft Security Essentials, available for download tomorrow

Microsoft just announced that Microsoft Security Essentials will be available for download tomorrow. From the press release Microsoft Security Essentials, Microsoft Corp.’s new no-cost, core anti-malware service that helps protect consumers against viruses, spyware and other malicious software, will be available tomorrow, Tuesday, Sept. 29. Microsoft Security Essentials, independently certified by West Coast Labs, is […]

Read More...
0

Highly Critical Adobe Reader/Acrobat SWF Content Arbitrary Code Execution Vulnerability

Another critical Adobe Reader Vulnerability. A vulnerability has been reported in Adobe Reader and Acrobat, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to an error in authplay.dll when processing SWF content and can be exploited to execute arbitrary code. From Adobe’s security advisory A critical […]

Read More...
0

Vulnerability in Microsoft Office Web Components control could allow remote code execution

Vulnerability in Microsoft Office Web Components control could allow remote code execution Another critical problem that is currently being exploited in the wild (0 day attack). Microsoft is investigating a privately reported vulnerability in Microsoft Office Web Components. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. […]

Read More...
0

Vulnerability in Microsoft Video ActiveX control could allow remote code execution

This is a bad one if you are running Windows XP or Windows Server 2003 with Internet Explorer. If you are running Windows Vista, Windows 7 or Windows Server 2008 then you are not affected The bad part about this is that all it takes for you is to visit a bad site. If you […]

Read More...
0

Vulnerability in DirectX Could Allow Remote Code Execution

Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution Microsoft is investigating new public reports of a new vulnerability in Microsoft DirectX. From Microsoft Security Advisory (971778) Microsoft is investigating new public reports of a new vulnerability in Microsoft DirectX. The vulnerability could allow remote code execution if user opened a specially crafted QuickTime media […]

Read More...
0

Vulnerability in IIS Could Allow Elevation of Privilege

Microsoft is investigating new public reports of a possible vulnerability in Microsoft Internet Information Services (IIS). An elevation of privilege vulnerability exists in the way that the WebDAV extension for IIS handles HTTP requests. An attacker could exploit this vulnerability by creating a specially crafted anonymous HTTP request to gain access to a location that […]

Read More...
0

Microsoft bans memcpy() to minimize buffer overflows

Microsoft announced that they have added memcpy() to their list of banned functions. The function memcpy() has been responsible for a bunch of security problems in Microsoft and third party products. The reason for this is that memcpy() is not safe and…

Read More...
2

Kaspersky Web Site Hacked With SQL Injection, How Embarrassing Is This?

We all know that Kaspersky is a security firm and they make a very nice product, you can see a list of their products here: http://www.kaspersky.com/ What I found out today on twitter is that their site got hacked by a SQL Injection attack. The tool that was used was the Acunetix Web Security Scanner. […]

Read More...
« Previous PageNext Page »