Saturday, September 23, 2006

Two Windows Security Flaws

The first is a zero day exploit that affects Internet Explorer ( and Outlook ) even on fully patched copies of Windows XP. The second is a file corruption bug in Windows 2000 introduced by a Microsoft patch. Steve Gibson has fixes for both in his Security Now podcast, plus an interview with the fellow who discovered the VWL exploit. For 16kpbs versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of ShieldsUp and the best disk maintenance and recovery utility ever written Spinrite 6.

If you have never heard of Steve Gibson you really should go over to his website at Gibson Research and at least do the ShieldsUp test. You just might be amazed and surprised at what you find.

No comments: