Zero day Word flaw exploited by Trojan

Wednesday, July 9th, 2008

Microsoft warns that an unpatched Word vulnerability has become the subject of targeted attacks.The flaw - which is restricted to Microsoft Office Word 2002 Service Pack 3 - creates a mechanism for hackers to inject hostile code onto vulnerable systems. Redmond has published workarounds as a stop-gap measure while its ...

Microsoft DNS Security Fix Knocks ZoneAlarm Users Offline

Wednesday, July 9th, 2008

The problem began when Microsoft on Tuesday sent patch number KB951748 to Windows users. The patch is designed to plug a security vulnerability that leaves computers vulnerable to so-called DNS attacks.The vulnerability is widespread and affects products made by numerous networking and software vendors beyond Microsoft. It was discovered by ...

MS KB951748 breaks ZoneAlarm

Tuesday, July 8th, 2008

Windows update KB951748 should not be installed. It will break your Internet connection. If you have it already installed, uninstalling it fixes the problem. I have spent the day troubleshooting over 20 PCs and have found all installations to have the install date of 9 July 2008, which in my part ...

Microsoft warns of new Access attack

Tuesday, July 8th, 2008

Cybercriminals are exploiting a bug in software used by Microsoft's Access database program in a new online attack, Microsoft warned Monday.The flaw lies in the Snapshot Viewer ActiveX control, which ships with "all supported versions of Microsoft Office Access except Microsoft Access 2007," Microsoft said in a security advisory, published ...

Four ‘important’ Microsoft patches due Tuesday

Friday, July 4th, 2008

Microsoft will release four security patches for its Windows, Exchange, and SQL products next Tuesday, all rated "important."The Exchange and SQL flaws are "Elevation of Privilege" bugs, meaning that an attacker could theoretically exploit them to get administrative access to a PC. One of the Windows flaws is labeled a ...