| 

It's not dead yet: Microsoft's out-of-band IE6 fix impacts IE8

  • Post author: Omid Farhang
  • Post published: March 30, 2010
  • Reading Time: 2 min
  • Word Count: 292 words

Last month, Microsoft sent flowers to a mock funeral for Internet Explorer 6, in a show of support for the ideal that the old browser should be declared defunct worldwide. But for a few years yet, the company is still bound to support the product for those users (generally businesses) who refuse to upgrade it. That’s why new exploits that continue to target old browsers, such as IE6 and IE7, continue to get attention even a full year after the proper security fix — IE8 — has been deployed. ...

Continue Reading It's not dead yet: Microsoft's out-of-band IE6 fix impacts IE8

Download Windows 7 Mountains Theme – Syue & Nenggao

  • Post author: Omid Farhang
  • Post published: March 23, 2010
  • Reading Time: 1 min
  • Word Count: 89 words

We’ve previously listed many official themes for Windows 7, presented by Microsoft at Windows 7 Personalization Gallery. Here are 2 more new themes which truly depicts the prominent beauty of Taiwanese mountains ‘Syue & Nenggao’ in Taiwan. Syue or Hsuehshan or Snow Mountain is the second highest mountain in Taiwan with its main peak at 3,886 m (12,749 ft) above sea level. Nenggao is a mountain in Taiwan whose southern peak has an elevation of 3,349 m. Its main peak lies at 3,261 m. ...

Continue Reading Download Windows 7 Mountains Theme – Syue & Nenggao

Fix-it-Tool for IE-0-day

  • Post author: Omid Farhang
  • Post published: March 23, 2010
  • Reading Time: 1 min
  • Word Count: 68 words

For the current vulnerability in Internet Explorer 6 and 7 which already gets actively exploited on the net, Microsoft is already testing a patch. The company is still considering whether to release the patch on the regular Patchday or out-of-band. Meanwhile, a “Fix-it”-solution is available. With some registry changes the affected peers factory in iepeers.dll gets disabled by a mouse click. You can download it from Microsoft’s knowledgebase.

Continue Reading Fix-it-Tool for IE-0-day

The Browser Choice Reloaded

  • Post author: Omid Farhang
  • Post published: March 22, 2010
  • Reading Time: 2 min
  • Word Count: 217 words

A little more than a week ago Microsoft started delivering a new Browser Choice for Windows to be compliant to the European Union law. There are plenty of web browsers to choose from, and my colleague Sorin Mustaca recommended Firefox. Usually a good choice, but currently users should be cautious about which browser they choose: Opera just released version 10.51 of their web browser. According to the changelog, it fixes a vulnerability which could lead to execution of injected code. Users of opera 10.50 should update as soon as possible. ...

Continue Reading The Browser Choice Reloaded

Windows XP Mode now accessible to more PCs

  • Post author: Omid Farhang
  • Post published: March 19, 2010
  • Reading Time: 1 min
  • Word Count: 212 words

Microsoft is announcing an update to Windows XP Mode today that will make it a more accessible to PCs in small and midsize businesses who want to migrate to Windows 7 Professional but have applications that still require Windows XP. Windows XP Mode will no longer require hardware virtualization technology to run. This change makes it extremely easy for businesses to use Windows XP Mode to address any application incompatibility roadblocks they might have in migrating to Windows 7. Windows XP Mode will of course continue to use hardware virtualization technology such as Intel VT (Intel Virtualization Technology) or AMD-V if available. You can find more information and download the update which will go live later today here. ...

Continue Reading Windows XP Mode now accessible to more PCs

Exploit Code for IE 0-day vulnerability

  • Post author: Omid Farhang
  • Post published: March 12, 2010
  • Reading Time: 1 min
  • Word Count: 110 words

Exploit code for the the zero-day vulnerability in Internet Explorer has been added to the Metasploit framework. According to an email HD Moore wrote to ZDNet’s Ryan Naraine, the exploit works quite reliable – successful 50% of the times on Windows XP with SP2 and SP3 with IE7 and deactivated Data Execution Prevention (DEP). The security hole got reported yesterday on Microsoft’s March 2010 Patch Tuesday. Drive-by-Download-Exploits are likely to appear now as the Metasploit framework is open source and the exploit can now be abused even by script kiddies. Time to change the default browser – Microsoft just released a new browser choice screen which allows for exactly that! ...

Continue Reading Exploit Code for IE 0-day vulnerability

Microsoft Patch Tuesday – March 2010

  • Post author: Omid Farhang
  • Post published: March 10, 2010
  • Reading Time: 5 min
  • Word Count: 974 words

Hello and welcome to this month’s blog on the Microsoft patch releases. This is a fairly quiet month—the vendor is releasing two bulletins covering a total of eight vulnerabilities. All of the issues are rated “Important” this month: seven affecting Office/Excel and one affecting Movie Maker and Producer. All of the issues are file-based remote code-execution vulnerabilities in the context of the currently logged-in user. Microsoft also released a security advisory (981374) today regarding a publicly disclosed vulnerability affecting Internet Explorer 6 and 7. Limited, targeted attacks exploiting this issue have been detected in the wild. ...

Continue Reading Microsoft Patch Tuesday – March 2010

The Browser Choice

  • Post author: Omid Farhang
  • Post published: March 8, 2010
  • Reading Time: 2 min
  • Word Count: 320 words

A Windows Update is available to users who are located in member countries of the European Union allowing for choosing a different standard browser for the system. The update is available for download through Windows Update. The Update creates a shortcut on your desktop. This shortcut leads to a Web page in which it is possible to select which Web browser to install. Additionally, the first time the users logs in to the computer after installing the update, Windows Internet Explorer starts automatically and displays the Browser Choice Web page. ...

Continue Reading The Browser Choice

Download Life Theme Pack for Windows 7

  • Post author: Omid Farhang
  • Post published: March 6, 2010
  • Reading Time: 1 min
  • Word Count: 50 words

After the Spring theme pack Microsoft has released a beautiful Life theme. It consists of five beautiful Discovery channel wallpapers based on wild life and nature. This is a official theme and can be applied just by double clicking on the theme file. Download: Life Theme pack for Windows 7

Continue Reading Download Life Theme Pack for Windows 7

Patch Tuesday coming next week

  • Post author: Omid Farhang
  • Post published: March 5, 2010
  • Reading Time: 1 min
  • Word Count: 53 words

Microsoft has issued an advance notification for Patch Tuesday next week. The company said it expects to issue two patches, one for Windows and one for Office. Both are intended to patch vulnerabilities that could allow remote code execution and both are rated “important.” Microsoft Security Bulletin Advance Notification for March 2010 here.

Continue Reading Patch Tuesday coming next week