activex

Wed
12
Aug
Dennis Faas's picture

Security Experts on August Patch Tuesday: Update Now

Another Microsoft Patch Tuesday has come to pass, and with it a fairly long list of fixes. A total of nine patches have been made available for five issues marked "critical". An incredible 19 problems have been addressed by the entire day's release. ... The nine patches address holes in Windows, MS Office software, ISA Server, Microsoft Visual Studio, the .Net Framework, BizTalk Server, and also Remote Desktop Client for Mac. MS Office Flaw Very Serious It's possible none of the fixes are more important than one Microsoft made public last month. Affecting Microsoft Office, the issue specifically ... (view more)

Fri
07
Aug
Dennis Faas's picture

Java SE6 Update Fixes Exploit Linked to ActiveX Flaw

Java SE6 is set to receive what is being called "significant security patches." The need for repair came after the US-CERT (United States Computer Emergency Readiness Team) warned that a number of vulnerabilities were in existence, allowing ... potential hackers to bypass authentication methods and execute arbitrary codes. One flaw exposes Java's audio system; if left unpatched, online deviants could be given access to a computer system without authorization. Another exploit provides root access to a vulnerable machine. Java Exploit Linked to ActiveX The most prominent flaw to be patched is ... (view more)

Wed
15
Jul
Dennis Faas's picture

MS Patch Tuesday Solves ActiveX DirectShow Flaw

Microsoft has made available a patch that promises fixes for nine vulnerabilities, three marked "critical" and another three deemed "important." Most Windows users will be glad to hear that a solution for the much-feared ActiveX DirectShow flaw has ... also been made available. Last week Microsoft made big news in a bad way for its ActiveX security flaw, which threatened to sicken user computers via infected web pages and "drive by" or "browse and get owned" attack codes within legitimate web pages. Much criticism lodged against Microsoft for the company's alleged knowledge of ... (view more)

Tue
07
Jul
Dennis Faas's picture

ActiveX Security Hole Stumps Microsoft

The recent report of a security hole in Microsoft's Video ActiveX Control appears to have the Redmond-based company stumped. According to insiders, Microsoft is investigating a flaw that targets a component it didn't even realize was still being ... used. Security reports suggest that the vulnerability has already been exploited and that a solution must be produced by Microsoft as soon as possible. The company is investigating and promises to have a fix soon, but in the meantime has revealed that only select operating systems, including Windows XP and Windows Server 2003, are affected. Users of ... (view more)

Fri
17
Aug
Dennis Faas's picture

Zero-Day Threat Quietly Growing

It's the calm before the storm. As I write this, the threat of a zero-day virus exists in third-party software utilized by Microsoft, and few seem to know about it. The hole lies in DirectX Media Software Developers Kit, or SDK, which is regularly ... included in Microsoft's own products. It takes on the form of an ActiveX control, a measure created before the turn of the century for crafting plug-ins for programs like the web's most dominant web browser, Internet Explorer. So, what's the threat?!?! Calm down. For now, there have been no reports of anyone being attacked. What it takes, however, ... (view more)

Sat
22
Apr
Dennis Faas's picture

Coping with Microsoft's April 2006 Windows Update Headaches (MS06-015)

Earlier this month, Microsoft released a series of critical patches that affect the way that Internet Explorer handles web pages that use ActiveX controls. Microsoft's $521 Million Dollar Patch To recap: In 2004 Microsoft lost a patent lawsuit on a ... method for embedding and invoking interactive applications in web browsers (such as applets and plug-ins). The patent affects the way Internet Explorer manipulates interactive content, including: Flash or QuickTime movies, Adobe acrobat reader, Apple QuickTime player, Macromedia flash player, Microsoft Windows media player, Real Networks real ... (view more)

Mon
10
Apr
Dennis Faas's picture

Microsoft's $521 Million Dollar Patch

In 2003, a federal court ruled that Microsoft must pay $521 million to a Chicago-based Eolas Technologies company and the University of California. (Source: cnet.com ) Eolas sued Microsoft on the basis that the software giant infringed upon its ... patent that allows web browsers to embed and execute interactive programs -- what we know today as "ActiveX Technology" for Internet Explorer. Now almost three years later, the Eolas vs. Microsoft fiasco is finally coming to a close. According to Internet News , on Tuesday, April 11th, Microsoft will be releasing a patch related to the lawsuit that ... (view more)

Wed
30
Jul
Dennis Faas's picture

Internet Explorer MSHTA Security Threat

I'd like to discuss a security threat which was recently discovered in Internet Explorer. Mike Healan of Spywareinfo.com forwarded an article to me today. The article urges all Windows users to take the necessary precautions to secure their browsers ... from a nasty exploit recently discovered in Internet Explorer. The exploit allows hackers to gain control of a system and execute harmful code. http://www.spywareinfo.com/articles/htasploit/ Without further adieu, here is the article by Mike Healan (edited): -- Members of the SWI support forums have uncovered a very nasty flaw in Internet Explorer ... (view more)

Subscribe to RSS - activex