SQL Server 2005の更新プログラムで 737d エラーが出てしまう時の対処方法
Monday, October 19, 2009
小野寺です。 SQL Server 2005 の更新プログラムを適用する際に、Microsoft Update で 737d エラーが出てしまう事がある
2009
2009年10月14日のセキュリティ情報
Tuesday, October 13, 2009
小野寺です 事前通知でお伝えした通り、セキュリティ情報 計 13 件 (緊急 8 件, 重要 5 件)を公開しました。 合わ
2009年10月のワンポイントセキュリティ(リニューアル版)
Tuesday, October 13, 2009
小野寺です。 10 月のワンポイント セキュリティ情報を公開しました。 なお、今月より一部内容をリニューアルし
Babel Hacking
Tuesday, October 13, 2009
Hello world! Remember Mad Libs? How about Scrabble, when you’d try making up words that sound legit just to be de-bluffed by your friend. Playing these games provides endless hours of fun with words and letters. In software and the Internet, words, letters, and text are everything. Whether you’re up in the cloud, down in the code, or consuming the content—written language is the information that’s central to it all.
October 2009 Security Bulletin Release
Tuesday, October 13, 2009
Summary of Microsoft’s Security Bulletin Release for October 2009 This month, we released 13 new bulletins which address 33 vulnerabilities in Windows, Internet Explorer and Microsoft Office. Since we published this information in our advance notification (ANS) last Thursday, we have been asked “is this the most bulletins Microsoft has ever released”?
Assessing the risk of the October security bulletins
Monday, October 12, 2009
This morning we released 13 security bulletins, our largest release of 2009. Altogether, these bulletins address 34 separate CVEs. We’d like to use this blog post to help you prioritize your deployment of the updates. Prioritization Criteria We’ve provided a prioritized list of bulletins in the table below. The prioritization is based on the following criteria:
MS09-050: Exploit timeline for the SMB2 RCE vulnerability
Monday, October 12, 2009
This month we are releasing update MS09-050 to address the SMBv2 RCE vulnerability (CVE-2009-3103). Due to the fact that public exploit code exists for this vulnerability, we felt it would be good to summarize the exploit landscape at the time of release, so customers can use this information to prioritize the deployment of the update.
MS09-051: A note on the affected platforms
Monday, October 12, 2009
MS09-051 addresses a vulnerability (CVE-2009-0555) in the speech codec of Microsoft Window Media Component. Users of Windows XP/Windows Vista/Windows Server 2003/Windows Server 2008* are affected by this vulnerability. However, for Win2k users, the story is more complex and we would like to go into more detail in this blog. *Windows Server 2008 Core installation is not affected.
MS09-054: Extra info on the attack surface for the IE security bulletin
Monday, October 12, 2009
MS09-054 addresses an IE vulnerability (CVE-2009-2529), which was discovered and presented by Mark Dowd, Ryan Smith, and David Dewey at the BlackHat conference in July. First we’d like to make it clear that any customers that have applied the update associated with MS09-054 are protected, regardless of the attack vector. And most customers need not take any action as they’ll receive this update automatically through Automatic Updates.
MS09-056: Addressing the X.509 CryptoAPI ASN.1 security vulnerabilities
Monday, October 12, 2009
MS09-056 addresses two vulnerabilities that affect how the Windows CryptoAPI parses X.509 digital certificates. Applications on the Windows platform as well as Windows components such as the WinHTTP API can call into the CryptoAPI which provides cryptographic services to validate digital certificates. Internet Explorer, for instance, uses the CryptoAPI to parse and validate the certificate of remote web servers while browsing.