dll

Microsoft is preparing another large Patch Tuesday security release this month, issuing nine bulletins that address a total of thirteen vulnerabilities. These patches target flaws affecting the Windows operating system (OS), Internet Information ... Services, and popular business suite Microsoft Office. Importantly, four of the nine bulletins have been designated "critical," Microsoft's most serious rating. The other five are all marked "important" by the company's Security Response Center blog, Microsoft's second-highest rating. Windows XP Users Most At-Risk All three of the Redmond-based firm's ... (view more)

Microsoft has issued an automated Windows tool designed to limit the effects of a recent DLL bug . The company has also noted it is only classing the problem as an "important" rather than "critical" risk. Windows Dynamic Link Library (DLL) Bug As ... noted previously, the problem involves dynamic link libraries (DLLs), a type of shortcut that allows multiple applications to access the same code in Windows. Many applications are set to automatically open any DLLs stored within their program folders. It's now emerged that it is easier than previously thought to create bogus files that can exploit ... (view more)

A security expert says he's seen a record response to the recently-named "Windows DLL bug," which can allow hackers to remotely control infected PCs. Mati Aharoni predicts the number of affected applications will soon be in the hundreds. This week, ... Microsoft published a temporary workaround that prevents the exploit from occurring. It's working with third-party application developers to find individual and permanent solutions, but is still extremely wary of issuing a fix to Windows itself. The issue involves a system in Windows known as dynamic link libraries (DLL), a shortcut for ... (view more)

A stealth update deviously deployed in July and August by Microsoft without user permission has broken Windows Update, preventing updates from being installed after a "repair" of Windows XP is performed. The problem was first reported by Scott Dunn ... from Windows Secrets , then confirmed by ZDNet . Originally thought to be harmless, the recent download of new support files, known as version 7.0.600.381 for Windows Update, prevents Windows XP users who perform repair installations from a genuine XP CD-ROM (not an OEM restore CD), from installing at least 80 updates and patches from Microsoft. ... (view more)

The United States Emergency Readiness Team (US-CERT) has issued an advisory regarding remote tech support tools made by SupportSoft. The affected software uses ActiveX controls contain multiple buffer overflow vulnerabilities which could allow a ... remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. The SupportSoft ActiveX controls are essentially small applications that can be run from Microsoft's Internet Explorer. The affected software is often used by Internet service providers, PC makers and other companies to provide support functions such as remote ... (view more)

This feature article is a step away from our normal discussions, as I am currently out of town visiting a friend in Toronto, Ontario for the next few days. RE: My encounter with the Backdoor.Agent.B Trojan I arrived at Frank's place in Toronto this ... past Sunday, and was unable to access the Internet until Wednesday. Unfortunately, Frank's computer was host to 35 virus-infected files, 7 Spyware variants, 4 Trojans, and 2 Internet worms (including MyDoom and SoBig) -- and he didn't even know it. I spent much of Monday and Tuesday "undoing" the damage caused by the malware. I have to ... (view more)