2010/12 | Microsoft Security Response Center

長期休暇の前に、PC のチェックを忘れずに！

Monday, December 27, 2010

こんにちは、セキュリティレスポンスチームです。もうすでに年末年始のお休みに入られている方も多いかもし

IE の新規アドバイザリ 2488013 を公開

Thursday, December 23, 2010

本日、Internet Explorer のセキュリティアドバイザリ2488013を公開しました。Internet Explorer 6

Assessing an IIS FTP 7.5 Unauthenticated Denial of Service Vulnerability

Wednesday, December 22, 2010

There has been some discussion around a publicly posted PoC code that exploits a vulnerability in IIS FTP 7.5, which ships with Windows 7 and Windows Server 2008 R2. Our engineering team is looking into the situation and has made a few preliminary observations that might clear up some confusion. We’ve observed three notable characteristics.

IIS FTP IAC Interpret As Command

Microsoft Releases Security Advisory 2488013

Wednesday, December 22, 2010

Hello, Today we released Security Advisory 2488013 to address a public vulnerability that could affect customers using Internet Explorer 6, 7 and 8 if they visit a website hosting malicious code. Currently the impact of this vulnerability is limited and we are not aware of any affected customers or active attacks targeting customers.

Security Advisory

New Internet Explorer vulnerability affecting all versions of IE

Wednesday, December 22, 2010

Today we released Security Advisory 2488013 to notify customers of a new publicly-disclosed vulnerability in Internet Explorer (IE). This vulnerability affects all versions of IE. Exploiting this vulnerability could lead to unauthorized remote code execution inside the iexplore.exe process. Proof-of-concept exploit bypasses ASLR and DEP The Metasploit project recently published an exploit for this vulnerability using a known technique to evade ASLR (Address Space Layout Randomization) and bypass DEP (Data Execution Prevention).

X’mas ギフト

Monday, December 20, 2010

こんにちは。セキュリティレスポンスチームです。もうすぐクリスマス、そして年末年始と、楽しい休暇シーズ

Q&A from the December 2010 Security Bulletin Webcast

Friday, December 17, 2010

Hello, Today we published the December 2010 Security Bulletin Webcast Questions & Answers page. We fielded 17 questions, most concerning the Internet Explorer update and the re-releases of bulletins this month. We invite our customers to join us for the next public webcast on Wednesday, January 12 at 11am PST (-8 UTC), when we will go into detail about the December bulletin release and answer questions live on the air.