No. 1 Story
ACCC clears Optus to scrap HFC network and use NBN instead
The ACCC has cleared, provisionally, the proposed deal between Optus and NBN Co under which Optus is to be paid around $800m to shut down its HFC network and transfer customers onto the NBN. read moreRelated Articles
Security, conferences, trigger, early, release, Microsoft, security, patchesAustralian businesses are becoming soft targets for malicious hackers and they lag significantly behind...
To address the ever growing concerns of CIOs around security of mobile devices, US...
Juniper Networks has extended its SSL VPN security to the iPad with the release...
Microsoft is planning to dish up heapin' helpin' of security bulletins next week. So...
Using the same internal engine as Norton Internet Security 2010, including the new 'reputation...
More From
Security conferences trigger early release of Microsoft security patches
Stephen Withers
Wednesday, 29 July 2009 04:23
Page 1 of 2
Rather than wait for August's Patch Tuesday, Microsoft has rushed out a pair of security bulletins ahead of the Black Hat and Defcon security conferences.The core of the problem lies in the Microsoft Active Template Library (ATL) distributed with Visual Studio.
Visual Studio itself is not vulnerable, but controls and components built in Visual Studio using the ATL may be, depending on decisions made by the developer concerned.
According to Microsoft officials, the security impact of the vulnerabilities in affected applications would be critical or moderate as they provide an opportunity for remote code execution.
Updates are available for Visual Studio .NET 2003; Visual Studio 2005 and 2008; and the Visual C++ 2005 and 2008 Redistributable Packages.
It is up to developers to create and distribute new versions of software that use the ATL. Among the resources Microsoft is offering to developers is a flow chart to help determine whether a particular ActiveX control is vulnerable.
Microsoft has been working with the developers of widely used ActiveX controls to help them identify vulnerable items. The company has also reminded developers that it will set kill bits for their controls on request as part of a Microsoft Update.
Kill bits will also be set in this way for vulnerable controls that are under attack if their vendor cannot be identified.
What about Internet Explorer? See page 2.
You think you have a disaster recovery plan?
Think again. Most businesses only have PART of a DR plan - and this spells business disaster in the event of an IT disaster.
Download The Seven Sins of Disaster Recovery White Paper now and find out how you can prevent this happening to you.
