Telstra has revealed the addition of almost one million new mobile services in the six months to December 2011, but Sensis revenues plummeted 24 percent in 12 months.
Symantec has warned that the bad guys have started using drive-by downloads of a genuine Microsoft software component to open a security hole for subsequent exploit.
The item in question is the Access Snapshot Viewer ActiveX control, which is the subject of a critical update that Microsoft plans to release next week.
The control allows reports created in Access to displayed in Internet Explorer, even if Access itself is not installed.
Since the Viewer is signed by Microsoft, a web site can install the control without the user being aware that anything is happening. The vulnerability in the Snapshot Viewer then allows remote code execution.
According to Websense Security Labs, the vulnerability is easy to exploit.
While the Snapshot Viewer is not part of a normal Windows installation, it is part of Office 2000, 2002 and 2003, which means it is widely present. But the latest development means it the flaw can potentially be exploited whether or not the control is already installed.
Both Symantec and Websense recommend setting the killbit for the control as advised by Microsoft on July 7.
The downside is that this will completely prevent the use of the control - even for legitimate purposes - until the new version is installed.
David Bass
| For the fourth year in a row, IDC has placed content security provider Websense (NASDAQ: WBSN) at the top of the IDC Worldwide Web Security 2011 –…
How to Make Business Discovery Work for Your Business
Business Discovery takes its cues from consumer apps. Like Google, it encourages us- ers to hunt for and explore data without worrying about or even noticing the underly- ing technology. Their entire experience is working within an intuitive interface to get real-time, self-service results with only minimal training. ...more
Try an easy-to-use set of web-enabled
tools for business-class productivity services. Office 365 provides
anywhere-access to email, important documents, contacts, and calendars
on almost any device.
LATEST HEADLINES FROM YOUR IT
