|
|
|
Microsoft Security Advisory 971778 Vulnerability in Microsoft DirectShow Released |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Présentation : We?ve just released Microsoft Security Advisory 971778 today. This discusses a new vulnerability in Microsoft DirectShow affecting Windows 2000, Windows XP and Windows Server 2003 that is under limited attack. The advisory outlines information about the vulnerability and steps customers can take to protect themselves while we?re working on a security update to address the issue. Our investigation has shown that the vulnerable code was removed as part of our work building Windows Vista. This means that Windows Vista and versions of Windows since Windows Vista (Windows Server 2008, Windows 7) are not vulnerable. The vulnerability is in the QuickTime parser in Microsoft DirectShow. An attacker would try and exploit the vulnerability by crafting a specially formed video file and then posting it on a website or sending it as an attachment in e-mail. While this isn?t a browser vulnerability, because the vulnerability is in DirectShow, a browser-based vector is potentially accessible through any browser using media plug-ins that use DirectShow. Also, we?ve verified that it is possible to direct calls to DirectShow specifically, even if Apple?s QuickTime (which is not vulnerable) is installed. Our investigation has found three workarounds that you can implement to protect yourself and we?ve documented these in the security advisory. In addition, we?ve got more technical details on the workarounds and the issue over at the Security Research and Defense (SRD) blog. Most importantly, we have found one workaround in particular that is simple and effective and protects against the vulnerability with limited impact. In fact, this particular workaround is simple enough that we?ve been able to give you a way to automatically implement the workaround with the click of a button. Our Customer Service and Support (CSS) group has a new capability called ?Fix it? that can automatically apply simple solutions to your system. We?ve gone ahead and built a ?Fix it? that implements the ?Disable the parsing of QuickTime content in quartz.dll? registry change workaround. We have also built a "Fix it" that will undo the workaround automatically. To automatically implement the workaround, go to the KB article for the advisory. In the KB article, there?s a section titled ?Fix it for me?. Click on the ?Fix this problem? button under "Enable Workaround" in that section. You will then be offered an installer package from the Microsoft website. After you?ve confirmed that you trust the source of this package, run it on your system. The package will automatically set the appropriate registry keys on your system to implement the workaround. When you want to undo the workaround, click on the "Fix this problem" button under "Disable Workaround" in the same section. We?re also sharing information about this vulnerability and the limited attacks that we?ve seen with partners in our Microsoft Active Protections Program (MAPP) and our Microsoft Security Response Alliance (MSRA) program to provide information that they can use to provide broader protections to customers. As always, we?ll continue monitoring the situation and providing more information through the security advisory and the MSRC weblog. Thanks Christopher *This posting is provided "AS IS" with no warranties, and confers no rights* []
Les mots clés de la revue de presse pour cet article : microsoft security advisory vulnerability
Les videos sur SecuObs pour les mots clés : microsoft security vulnerability
Les mots clés pour les articles publiés sur SecuObs : microsoft security
Les éléments de la revue Twitter pour les mots clé : microsoft security advisory vulnerability
Les derniers articles du site "The Microsoft Security Response Center MSRC " :
- Security Advisory 2028859 Released
- May 2010 Security Bulletin Webcast
- May 2010 Security Bulletin Release
- Advance Notification for the May 2010 Security Bulletin Release
- Update on MS10-016 for Microsoft Producer
- Security Advisory 983438 Released
- MS10-025 Re-Release Ready
- Update on MS10-025
- MS10-025 Security Update to be Re-released
- Guidance on Internet Explorer XSS Filter
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
