Microsoft IE Bug resurfaces

This has been a tough week for the Microsoft security team. Four security related bugs were announced earlier this week, one of which was originally announced in May of this year. This causes alot of fingerpointing between cyber security experts and the software giant. Analysts claim the bug should've been fixed but was ignored by Microsoft. However, Microsoft claims the bug was not reported to them appropriately in the correct fashion and therefore did not gain the adequate attention it required.

The bug is exposed when a call to the Windows() function occurs from within the Javascript of a web page. Hackers would trick users into clicking a link that would launch a web page containing the malicous code and eventually give the hacker access to the system. Win2003 machines with SP1, having the default Enhanced Security Configuration activated are exempt from this vulnerability.

For more information, please go to http://www.computerworld.com/printthis/2005/0,4814,106638,00.html

Comments

Post a Comment

Popular posts from this blog

Working with double quotes (") in VB.Net

String manipulation in VB2005 is fairly simple. However, things can get a little tricky with the double quote character. How do you look for it in a string? How can you insert into a string? How do you remove it from a string? These are questions that may lead to confusion if you don't know what you're looking for. Ironically enough, in VB the double quote can also be used as an escape character when searching for it in a string. For example: Dim strTest As String strTest = """123""" 'Displays "123" (double quotes appear in the final result) strTest = """""123""" 'Displays ""123" (double quotes appear in the final result) strTest = "test\""test" 'Displays test\"test strTest = "test""test" 'Displays test"test In cases where you want to insert a double quote character, simply reference it unicode character designation, ch...
Read more

FoxCon 2019

This year I had the privilege of being invited to FoxCon for the 5th time.  FoxCon is a private invite-only conference.  It was started decades ago when FoxPro was one of the products from Microsoft.  Although the product is no longer supported, it is still widely used and loved at many organizations of various sizes.  The FoxCon conference targets FoxPro related topics but the organizers are always open to hear new topics. This year I presented 2 sessions: "SQL Server Security"  and "New Features in SSRS 2017".  Presenting to a technical audience is something I have always enjoyed.  However, it seems much more enjoyable presenting to this group of tech experts. I look forward to attending and possibly presenting again next year.
Read more

Sep '19 Announcements

Listed below are announcements of developer events local and regional to the Cleveland area.  In addtion there are links to job openings and videos of past presentations. Local Events: Oct 1: ONSQL-Cleveland ( https://www.meetup.com/Ohio-North-SQL-Server-User-Group-Cleveland/ ) Oct 16: Hudson Software Craftsmanship Group ( https://www.meetup.com/Hudson-Software-Craftsmanship-Meetup/ ) Oct 24: Cleveland C#/VB.Net User Group ( https://www.meetup.com/Cleveland-C-VB-Net-User-Group/ ) Regional Events: Oct 1: ONSQL-Cleveland ( https://www.meetup.com/Ohio-North-SQL-Server-User-Group-Cleveland/ ) Oct 16: Hudson Software Craftsmanship Group ( https://www.meetup.com/Hudson-Software-Craftsmanship-Meetup/ ) Oct 24: Cleveland C#/VB.Net User Group ( https://www.meetup.com/Cleveland-C-VB-Net-User-Group/ ) Job Openings: TekSystems:  https://www.teksystems.com/it-jobs Inedo:  https://inedo.com/company/career-culture Video: Please subscribe to  https://www.youtube.com/channel/UCU4ffaI...
Read more