Posted on 11/05/2011 5:07:53 PM PDT by Kathy in Alaska
BTTT
Welcome Troops, Veterans, Families, and Allies!
God Bless You and Keep You Safe.
Thanks, unique, for our troop blessing.
Fields of Plenty ~ Be Still My Soul
Good Lord’s Day to you and yours, E...((HUGS))...Oklahoma has had some earthquake action. Did you feel it?
How did your teams do? Looks like you got your clocks turned back. Have a great day.
|
Wonderful devotion, Kathy!
This was one of the stronger quakes, Oklahoma has had.
Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2604930)
This security update resolves a privately reported vulnerability in Microsoft .NET Framework and Microsoft Silverlight. The vulnerability could allow remote code execution on a client system if a user views a specially crafted Web page using a Web browser that can run XAML Browser Applications (XBAPs) or Silverlight applications. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. The vulnerability could also allow remote code execution on a server system running IIS, if that server allows processing ASP.NET pages and an attacker succeeds in uploading a specially crafted ASP.NET page to that server and then executes the page, as could be the case in a Web hosting scenario. This vulnerability could also be used by Windows .NET applications to bypass Code Access Security (CAS) restrictions.
Critical
Remote Code Execution
May require restart
Microsoft .NET Framework, Microsoft Silverlight
MS11-081
Cumulative Security Update for Internet Explorer (2586448)
This security update resolves eight privately reported vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. An attacker who successfully exploited any of these vulnerabilities could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Critical
Remote Code Execution
Requires restart
Microsoft Windows, Internet Explorer
MS11-075
Vulnerability in Microsoft Active Accessibility Could Allow Remote Code Execution (2623699)
This security update resolves a privately reported vulnerability in the Microsoft Active Accessibility component. The vulnerability could allow remote code execution if an attacker convinces a user to open a legitimate file that is located in the same network directory as a specially crafted dynamic link library (DLL) file. Then, while opening the legitimate file, the Microsoft Active Accessibility component could attempt to load the DLL file and execute any code it contained. For an attack to be successful, a user must visit an untrusted remote file system location or WebDAV share and open a document from this location that is then loaded by a vulnerable application.
Important
Remote Code Execution
Requires restart
Microsoft Windows
MS11-076
Vulnerability in Windows Media Center Could Allow Remote Code Execution (2604926)
This security update resolves a publicly disclosed vulnerability in Windows Media Center. The vulnerability could allow remote code execution if an attacker convinces a user to open a legitimate file that is located in the same network directory as a specially crafted dynamic link library (DLL) file. Then, while opening the legitimate file, Windows Media Center could attempt to load the DLL file and execute any code it contained. For an attack to be successful, a user must visit an untrusted remote file system location or WebDAV share and open a legitimate file.
Important
Remote Code Execution
May require restart
Microsoft Windows
MS11-077
Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2567053)
This security update resolves four privately reported vulnerabilities in Microsoft Windows. The most severe of these vulnerabilities could allow remote code execution if a user opens a specially crafted font file (such as a .fon file) in a network share, a UNC or WebDAV location, or an e-mail attachment. For a remote attack to be successful, a user must visit an untrusted remote file system location or WebDAV share and open the specially crafted font file, or open the file as an e-mail attachment.
Important
Remote Code Execution
Requires restart
Microsoft Windows
MS11-079
Vulnerabilities in Microsoft Forefront Unified Access Gateway Could Cause Remote Code Execution (2544641)
This security update resolves five privately reported vulnerabilities in Forefront Unified Access Gateway (UAG). The most severe of these vulnerabilities could allow remote code execution if a user visits an affected Web site using a specially crafted URL. However, an attacker would have no way to force users to visit such a Web site. Instead, an attacker would have to persuade users to visit the Web site, typically by getting them to click a link in an e-mail message or Instant Messenger message that takes users to the attacker's Web site.
Important
Remote Code Execution
May require restart
Microsoft Forefront United Access Gateway
MS11-080
Vulnerability in Ancillary Function Driver Could Allow Elevation of Privilege (2592799)
This security update resolves a privately reported vulnerability in the Microsoft Windows Ancillary Function Driver (AFD). The vulnerability could allow elevation of privilege if an attacker logs on to a user's system and runs a specially crafted application. An attacker must have valid logon credentials and be able to log on locally to exploit the vulnerability.
Important
Elevation of Privilege
Requires restart
Microsoft Windows
MS11-082
Vulnerabilities in Host Integration Server Could Allow Denial of Service (2607670)
This security update resolves two publicly disclosed vulnerabilities in Host Integration Server. The vulnerabilities could allow denial of service if a remote attacker sends specially crafted network packets to a Host Integration Server listening on UDP port 1478 or TCP ports 1477 and 1478. Firewall best practices and standard default firewall configurations can help protect networks from attacks that originate outside the enterprise perimeter. Best practices recommend that systems that are connected to the Internet have a minimal number of ports exposed. In this case, the Host Integration Server ports should be blocked from the Internet.
Important
Denial of Service
May require restart
Microsoft Host Integration Server
Don’t Forget your wristwatch! LOL!
Good Morning, Kathy!
(((HUGS)))
|
I am wide awake an hour earlier. ugh.
Good morning LUV W and (((HUGS))) to you.
I set most of the clocks back yesterday.
I still have to set the one in my pickup.
((HUGS))Good Sunday morning, LUV W. How’s it going?
Howdy, EGC! It’s going well! (((hugs)))
Hope you and Bo are having a nice weekend! Did you feel the earthquake? My kids did!
?
?
?
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.