Blog Elements

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

Microsoft Windows Desktop Wallpaper Code Execution Vulnerability

2012-02-06/0 Comments/in Vulnerability & Threat Report/by SecurityOrb_Staff

Microsoft Windows Desktop Wallpaper Code Execution Vulnerability

Microsoft Internet Explorer ‘Forced Tweet’ Cross Domain

2012-02-06/0 Comments/in Vulnerability & Threat Report/by SecurityOrb_Staff

Microsoft Internet Explorer ‘Forced Tweet’ Cross Domain

Microsoft Windows Desktop Wallpaper Code Execution Vulnerability

2012-02-06/0 Comments/in Vulnerability & Threat Report/by SecurityOrb_Staff

Microsoft Windows Desktop Wallpaper Code Execution Vulnerability

Microsoft Internet Explorer ‘Forced Tweet’ Cross Domain

2012-02-06/0 Comments/in Vulnerability & Threat Report/by SecurityOrb_Staff

Microsoft Internet Explorer ‘Forced Tweet’ Cross Domain

Full Sized Blog Element (Big Preview Pic)

Microsoft Windows Desktop Wallpaper Code Execution Vulnerability

2012-02-06/0 Comments/in Vulnerability & Threat Report/by SecurityOrb_Staff

Microsoft Windows Desktop Wallpaper Code Execution Vulnerability

Rating: Medium

Affected OS: Windows XP (Service Pack 3, [++])

Description: A vulnerability in Microsoft Windows (desktop Wallpaper) may allow for local denial-of-service attacks.

Recommendation: SecurityOrb is not aware of a vendor-supplied patch/update at this time.

Observation: A vulnerability in Microsoft Windows (desktop Wallpaper) may allow for local denial-of-service attacks.

The flaw is specific to the invalid processing of SPI_SETDESKWALLPAPER and SPI_GETDESKWALLPAPER values. Successful exploitation requires local access, and can result in a local denial-of-service condition

Common Vulnerabilities & Exposures (CVE): CVE-2009-1808

IAVA Reference Number: IAVA-REF-NUMBER-NOMATCH

Microsoft Internet Explorer ‘Forced Tweet’ Cross Domain

2012-02-06/0 Comments/in Vulnerability & Threat Report/by SecurityOrb_Staff

Microsoft Internet Explorer ‘Forced Tweet’ Cross Domain

Rating: Medium

Affected OS: Windows XP (Service Pack 3, [++])

Description: A cross domain privilege escalation vulnerability is present in some version of Microsoft Internet Explorer.

Recommendation: SecurityOrb is not aware of a vendor-supplied patch/update at this time.

Observation: A cross domain privilege escalation vulnerability is present in some version of Microsoft Internet Explorer.

The flaw lies in Internet Explorer’s ability to load/render external web pages as a CSS file. Under certain circumstances session IDs can be hijacked and used to force ‘tweets’ through Twitter.com or utilize other URL shortening services to distribute exploits.

Common Vulnerabilities & Exposures (CVE): CVE-2009-2433

IAVA Reference Number: IAVA-REF-NUMBER-NOMATCH

Latest News

October is Cybersecurity Awareness Month: Why Cyber Basics Still Matter2024-10-08 - 10:51 AM
Reflecting on National Cybersecurity Awareness Month 2023: A Call for Continued Vigilance2023-11-01 - 9:32 PM
Comprehensive Guide to CISSP: A Review of “CISSP All-in-One Exam Guide, Ninth Edition” by Shon Harris and Fernando Maymi2023-09-15 - 6:17 PM

Advertise here Advertise here

Advertise here Advertise here