Vulnerabilities and exploits

It’s 42. TCP.

Three new MS Windows vulnerabilties have been published, along with ‘Proof of Concept’ exploit codes.

A worm that targets phpBB is on the loose

Secunia Research reports IE vulnerability which can be used to spoof website contents

There’s no question about it – 2004 will be marked in history as the ‘Year of Browser Vulnerabilities’.

Microsoft has issued another unscheduled patch, for Internet Explorer. It closes the IFrame vulnerability – this was detected on November 2nd, and has been widely exploited by a variety of malware.

More problems for SCO?

A brief overview of the evolution of malicious code in October 2004.

More from the AVAR 2004 conference in Tokyo

Saturday seemed like a quiet day, apart from the new Sober, however it was far from that. In the morning I received some local reports claiming that some respectable sites were distributing malware.

As it turns out, a popular Adserver had been compromised and scripts were modified in such a way…

Homegrown third-party patches for Internet Explorer or why it is not such a wise ideea to use cooking oil in your car’s engine.

About Sun Microsystems’ initiative to give away Solaris 10 free and a link to Sadmind, the only known Solaris worm.

How antivirus protection could help you not get arrested

AV products are NOT all the same

With the recently discovered exploits in Internet Explorer used by Bofra variants, Mozilla Foundation’s announcement of Firefox 1.0 comes just at the right moment.