Premium Essay

Microsoft Windows Graphics Rendering Engine Vulnerability

In:

Submitted By taylay
Words 501
Pages 3
Report on Microsoft Windows Graphics Rendering Engine Vulnerability:

Outline:
There is vulnerability in Windows graphics rendering engine that can allow unauthorized users to remotely execute a code on the affected system. This remote code execution vulnerability exists in the Graphics Rendering Engine because of the way that it handles Windows Metafile (.WMF) images.

This vulnerability currently affects the following versions of Windows:
• Microsoft Windows 2000 Service Pack 4.
• Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2.
• Microsoft Windows XP Professional x64 Edition.
• Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1.
• Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems.
• Microsoft Windows Server 2003 x64 Edition.
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME) – Review the FAQ section of this bulletin for details about these operating systems.

Symptoms:
• Unknown account with full administrator rights is created on the computer.
• There are unauthorized changes made to data.

Mechanism of Attack:
• If a user is logged on with administrative user rights, an attacker who can successfully exploit this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
• An attacker could exploit the vulnerability by constructing a specially crafted WMF image that could potentially allow remote code execution if a user visited a malicious Web site or opened a specially crafted attachment in e-mail. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

Mitigation Strategies:

Similar Documents

Free Essay

Linux

...in Computer Studies, University of Sunderland 2006 I. Abstract This dissertation details a project to design and produce a prototype Linux character environment file manipulation assisting application. The application is offering a friendly menu driven interface to handle the jobs that non-programmers keep finding cumbersome to master when it comes to working in a Unix/Linux interface, resulting in serious mistakes and much loss of productive time. The Linux File Management System is a basic program for every user at a Unix/Linux terminal. Advantages here include the fact that the support team does not have to be burdened with solving simple file based queries by the employees. The areas of Designing GUI interfaces in Linux and Windows versus Linux Security were researched and a prototype has been designed, developed and tested. An evaluation of the overall success of the project has been conducted and recommendations for future work are also given. Words II. Table of Contents 1) Introduction.................................................................................................................................4 1.1 Overview........................................................................................................4 1.2 Sponsor Background...........................................................................................................5 1.3 Research Topics...............................................

Words: 17681 - Pages: 71

Free Essay

Counseling Management System

...Company Profile Star Wire (India) Limited, one of the leading Mini Steel Plant is engaged in the manufacturing of Alloy Steels, Stainless Steel and Special Steels for diversified engineering application in shape of castings, forging and rolled products. Plant is fully equipped with modern equipment and testing facilities which have created confidence and ability for manufacturing various sophisticated grades of steel conforming to international and National standards. It has its own research and development center to facilitate the manufacturing activities and also catering to engineering and manufacturing industries for failure analysis and other analytical activities. The plant is situated in Ballabgarh, about 37 KMs from Delhi - Capital of India on Main Mathura Road (NH No. 2). The location is at easy approach by Air, Rail and Road. ABSTRACT The project “Counseling Management system” is to exploit the computer technology with Internet Facility and all its aspects as necessity arises. The proposed project will be a web-based portal to provide support and services to the Students of participating in university counseling. The project will make available the Students care services of member colleges to its Students through the Internet. Through this proposed website the Students can register herself and take Admissions and support accordingly. The project “Counseling management system” is specially associated with online Admission procedure of...

Words: 9525 - Pages: 39

Premium Essay

It and Its Scope

...UNIVERSITY OF MUMBAI Bachelor of Engineering Information Technology (Third Year – Sem. V & VI) Revised course (REV- 2012) from Academic Year 2014 -15 Under FACULTY OF TECHNOLOGY (As per Semester Based Credit and Grading System) University of Mumbai, Information Technology (semester V and VI) (Rev-2012) Page 1 Preamble To meet the challenge of ensuring excellence in engineering education, the issue of quality needs to be addressed, debated and taken forward in a systematic manner. Accreditation is the principal means of quality assurance in higher education. The major emphasis of accreditation process is to measure the outcomes of the program that is being accredited. In line with this Faculty of Technology of University of Mumbai has taken a lead in incorporating philosophy of outcome based education in the process of curriculum development. Faculty of Technology, University of Mumbai, in one of its meeting unanimously resolved that, each Board of Studies shall prepare some Program Educational Objectives (PEO‟s) and give freedom to affiliated Institutes to add few (PEO‟s) and course objectives and course outcomes to be clearly defined for each course, so that all faculty members in affiliated institutes understand the depth and approach of course to be taught, which will enhance learner‟s learning process. It was also resolved that, maximum senior faculty from colleges and experts from industry to be involved while revising the curriculum. I am happy to state...

Words: 10444 - Pages: 42

Premium Essay

Windows 10 Introduction

...Introducing Windows 10 for IT Professionals Technical Overview ED BOTT PUBLISHED BY Microsoft Press A Division of Microsoft Corporation One Microsoft Way Redmond, Washington 98052-6399 Copyright 2016 © Microsoft Corporation All rights reserved. No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher. ISBN: 978-0-7356-9697-6 Printed and bound in the United States of America. First Printing Microsoft Press books are available through booksellers and distributors worldwide. If you need support related to this book, email Microsoft Press Support at mspinput@microsoft.com. Please tell us what you think of this book at http://aka.ms/tellpress. This book is provided “as-is” and expresses the author’s views and opinions. The views, opinions and information expressed in this book, including URL and other Internet website references, may change without notice. Some examples depicted herein are provided for illustration only and are fictitious. No real association or connection is intended or should be inferred. Microsoft and the trademarks listed at http://www.microsoft.com/about/legal/en/us/IntellectualProperty/ Trademarks/EN-US.aspx are trademarks of the Microsoft group of companies. All other marks are property of their respective owners. Acquisitions Editor: Rosemary Caperton Project Editor: Christian Holdener; S4Carlisle Publishing Services Editorial Production:...

Words: 48336 - Pages: 194

Premium Essay

Computer Tricks

...EC-Council Press | The Experts: EC-Council EC-Council’s mission is to address the need for well educated and certified information security and e-business practitioners. EC-Council is a global, member based organization comprised of hundreds of industry and subject matter experts all working together to set the standards and raise the bar in Information Security certification and education. EC-Council certifications are viewed as the essential certifications needed where standard configuration and security policy courses fall short. Providing a true, hands-on, tactical approach to security, individuals armed with the knowledge disseminated by EC-Council programs are securing networks around the world and beating the hackers at their own game. The Solution: EC-Council Press The EC-Council | Press marks an innovation in academic text books and courses of study in information security, computer forensics, disaster recovery, and end-user security. By repurposing the essential content of EC-Council’s world class professional certification programs to fit academic programs, the EC-Council | Press was formed. With 8 Full Series, comprised of 27 different books, the EC-Council | Press is set to revolutionize global information security programs and ultimately create a new breed of practitioners capable of combating this growing epidemic of cybercrime and the rising threat of cyber war. This Certification: C|EH – Certified Ethical Hacker Certified Ethical Hacker is a certification...

Words: 61838 - Pages: 248

Premium Essay

Technology and Computers

...INFORMATION TECHNOLOGY FOUNDATION 1 Compiled By: RONKY F. DOH (aka: ronky biggy diggy daddy igp) FU DAME TALS OF COMPUTERS We are living in an information age dependent upon digital information. Digital information is electronic information, the result of computer processing. Every type of job relies upon getting information, using it, managing it, and relaying information to others. Computers enable the efficient processing and storage of information. Do not think of a computer merely as the machine with the keyboard and the mouse, although that might be true for some types of computers. Embedded computers may be inside your household appliances, the video cassette recorder, the automobile, planes, trains, power plants, water purification plants, calculators, and even inside a few toys. These embedded computers are very small. They affect our lives each day. Why, even modern traffic lights operate with computers. They are all around us. Think of additional ways in which computers affect our lives each day. Every organization somehow use(s) a computer to run the organization. Some of the places are hospitals, schools, fire department, banks, stores or supermarkets, stock exchange, police department, insurance companies, transport companies, and government agencies etc. What is a computer? A computer is many things to many people, depending on what it is being used for. At one time the computer can be a machine which processes the payroll, then it can be a machine which tabulates...

Words: 67033 - Pages: 269

Premium Essay

Blackjacking Security

...Blackjacking Security Threats to BlackBerry® Devices, PDAs, and Cell Phones in the Enterprise Daniel Hoffman Wiley Publishing, Inc. Blackjacking Blackjacking Security Threats to BlackBerry® Devices, PDAs, and Cell Phones in the Enterprise Daniel Hoffman Wiley Publishing, Inc. Blackjacking: Security Threats to BlackBerrys, PDAs, and Cell Phones in the Enterprise Published by Wiley Publishing, Inc. 10475 Crosspoint Boulevard Indianapolis, IN 46256 www.wiley.com Copyright © 2007 by Wiley Publishing, Inc., Indianapolis, Indiana Published simultaneously in Canada ISBN: 978-0-470-12754-4 Manufactured in the United States of America 10 9 8 7 6 5 4 3 2 1 No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Legal Department, Wiley Publishing, Inc., 10475 Crosspoint Blvd., Indianapolis, IN 46256, (317) 572-3447, fax (317) 572-4355, or online at http://www.wiley.com/go/permissions. Limit of Liability/Disclaimer of Warranty: The publisher and the author make...

Words: 83592 - Pages: 335

Free Essay

Fsfdfdfd

...steps 1.1 Why is virtualization useful? . . . . . . . . . . . . . . . 1.2 Some terminology . . . . . . . . . . . . . . . . . . . . . 1.3 Features overview . . . . . . . . . . . . . . . . . . . . . 1.4 Supported host operating systems . . . . . . . . . . . . 1.5 Installing VirtualBox and extension packs . . . . . . . . 1.6 Starting VirtualBox . . . . . . . . . . . . . . . . . . . . 1.7 Creating your first virtual machine . . . . . . . . . . . 1.8 Running your virtual machine . . . . . . . . . . . . . . 1.8.1 Starting a new VM for the first time . . . . . . 1.8.2 Capturing and releasing keyboard and mouse 1.8.3 Typing special characters . . . . . . . . . . . . 1.8.4 Changing removable media . . . . . . . . . . . 1.8.5 Resizing the machine’s window . . . . . . . . 1.8.6 Saving the state of the machine . . . . . . . . 1.9 Using VM groups . . . . . . . . . . . . . . . . . . . . . 1.10 Snapshots . . . . . . . . . . . . . . . . . . . . . . . . . 1.10.1 Taking, restoring and deleting snapshots . . . 1.10.2 Snapshot contents . . . . . . . . . . . . . . . . 1.11 Virtual machine configuration . . . . . . . . . . . . . . 1.12 Removing virtual machines . . . . . . . . . . . . . . . . 1.13 Cloning virtual machines . . . . . . . . . . . . . . . . . 1.14 Importing and exporting virtual machines . . . . . . . 1.15 Global Settings . . . . . . . . . . . . . . . . . . . . . . 1.16 Alternative front-ends . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

Words: 143714 - Pages: 575

Free Essay

Hacking

...that can be potentially destructive or dangerous. If you do not fully comprehend something on this book, don‘t study this book. Please refer to the laws and acts of your state/region/ province/zone/territory or country before accessing, using, or in any other way utilizing these resources. These materials and resources are for educational and research purposes only. Do not attempt to violate the law with anything enclosed here within. If this is your intention, then leave now. Neither writer of this book, review analyzers, the publisher, nor anyone else affiliated in any way, is going to admit any responsibility for your proceedings, actions or trials. About The Author Anurag Dwivedi is a 13 year old computer geek. Who likes to find vulnerabilities Doing Hacking , Programming , editing , cracking , web designing and writing books He Wants To Be An Software Designer..!!!! Join His Blog: Computer Expert Join Him On FB: Anurag Dwivedi Greetz : Hack The Universe Computer Expert Introduction What are Hackers Hackers Hierarchy Hacking Facebook Accounts using Tabnapping Hacking FB Accounts using Keylogger 10 Security Enhancements 5 Reasons Why PC Crash Delete An undeletable File Converting Movies To Psp Format Make Your Pc Faster Hacking Yahoo Messenger Multi Login Yahoo Chat Commands...

Words: 20358 - Pages: 82

Free Essay

Apple Ios

...A SEMINAR REPORT ON APPLE iOS 4 In DEPARTMENT OF COMPUTER SCIENCE & ENGG. HARYANA COLLEGE OF TECHNOLOGY AND MANAGEMENT, KAITHAL-136027 Session (Aug - Dec 2010) SUBMITTED BY: SUBMITTED TO: MAYUR BHOLA Mr. Arvind Kumar 7th semester [C.S.E. 1707372 Department] ABSTRACT iOS is Apple's mobile operating system developed originally for the iPhone, and later deployed on the iPod Touch and iPad as well. It is derived from Mac OS X, with which it shares the Darwin foundation, and is therefore a Unix-like operating system, by nature. In iOS, there are four abstraction layers: the Core OS layer, the Core Services layer, the Media layer, and the Cocoa Touch layer. The operating system uses roughly 500 megabytes of the device's storage. Version 4, announced in April 2010, introduced multitasking as well as several business-oriented features, including encryption for email and attachments. At the WWDC 2010 keynote on June 7, 2010, Apple announced that iPhone OS had been renamed iOS. Apple licenses the trademark for "iOS" from Cisco Systems (who own IOS), the same company with which Apple had earlier settled a dispute over the "iPhone" trademark...

Words: 10024 - Pages: 41

Premium Essay

Information Rules

...informationInformation Rules A STRATEGIC GUIDE TO THE NETWORK ECONOMY Carl Shapiro Hal R. Varian HARVARD BUSINESS SCHOOL PRESS BOSTON, MASSACHUSETTS Copyright © 1999 Carl Shapiro and Hai R. Varian All rights reserved Printed in the United States of America 03 02 01 00 99 5 Library of Congres§ Cataloging-in-Publication Data Shapiro, Carl. Information rules : a strategic guide to the network economy / Carl Shapiro and Hal R. Varian. p. cm. Includes bibliographical references and index. ISBN 0-87584-863-X (alk. paper) 1. Information technology—Economic aspects. 2. Information society. I. Varian, Hal R. II. Title. HC79.I55S53 1998 658.4'038—dc21 98-24923 GIF The paper used in this publication meets the requirements of the American National Standard for Permanence of Paper for Printed Library Materials Z39.49-1984. To Dawn, Eva, and Ben To Carol and Chris Contents Preface ix l The Information Economy 2 Pricing Information 19 3 Versioning Information 53 4 Rights Management 83 5 Recognizing Lock-In 103 6 Managing Lock-In 135 7 173 Networks and Positive Feedback 8 Cooperation and Compatibility 9 Waging a Standards War 10 Information Policy 227 261 297 viii I Contents Further Reading 319 Notes 327 Bibliography 329 Index 335 About the Authors 351 Preface Luck led us to write this book. Each of us became economists because we wanted to apply our ...

Words: 108051 - Pages: 433

Premium Essay

Information Rules

...Information Rules A STRATEGIC GUIDE TO THE NETWORK ECONOMY Carl Shapiro Hal R. Varian HARVARD BUSINESS SCHOOL PRESS BOSTON, MASSACHUSETTS Copyright © 1999 Carl Shapiro and Hai R. Varian All rights reserved Printed in the United States of America 03 02 01 00 99 5 Library of Congres§ Cataloging-in-Publication Data Shapiro, Carl. Information rules : a strategic guide to the network economy / Carl Shapiro and Hal R. Varian. p. cm. Includes bibliographical references and index. ISBN 0-87584-863-X (alk. paper) 1. Information technology—Economic aspects. 2. Information society. I. Varian, Hal R. II. Title. HC79.I55S53 1998 658.4'038—dc21 98-24923 GIF The paper used in this publication meets the requirements of the American National Standard for Permanence of Paper for Printed Library Materials Z39.49-1984. To Dawn, Eva, and Ben To Carol and Chris Contents Preface ix l The Information Economy 2 Pricing Information 19 3 Versioning Information 53 4 Rights Management 83 5 Recognizing Lock-In 103 6 Managing Lock-In 135 7 Networks and Positive Feedback 173 8 Cooperation and Compatibility 227 9 Waging a Standards War 261 297 10 Information Policy viii I Contents Further Reading 319 Notes 327 Bibliography 329 Index 335 About the Authors 351 Preface Luck led us to write this book. Each of us became economists because we wanted to apply our analytical training to better understand...

Words: 108016 - Pages: 433

Free Essay

Linux as a Personal Desktop Operating System

...Table of Contents Beginning Red Hat Linux 9 ...............................................................................................................................1 Introduction.........................................................................................................................................................4 Who Is This Book For?...........................................................................................................................4 What You Need to Use This Book.........................................................................................................4 What Is Linux? ........................................................................................................................................5 Linus Torvalds and the Birth of Linux.............................................................................................5 Why Choose Linux?.........................................................................................................................6 What Is Red Hat Linux 9?................................................................................................................7 What Is Covered in This Book?..............................................................................................................8 Conventions in This Book......................................................................................................................9 Customer Support...............

Words: 155032 - Pages: 621

Premium Essay

Impotent Music

...INFORMATION RESOURCE GUIDE Computer, Internet and Network Systems Security An Introduction to Security i Security Manual Compiled By: S.K.PARMAR, Cst N.Cowichan Duncan RCMP Det 6060 Canada Ave., Duncan, BC 250-748-5522 sunny@seaside.net This publication is for informational purposes only. In no way should this publication by interpreted as offering legal or accounting advice. If legal or other professional advice is needed it is encouraged that you seek it from the appropriate source. All product & company names mentioned in this manual are the [registered] trademarks of their respective owners. The mention of a product or company does not in itself constitute an endorsement. The articles, documents, publications, presentations, and white papers referenced and used to compile this manual are copyright protected by the original authors. Please give credit where it is due and obtain permission to use these. All material contained has been used with permission from the original author(s) or representing agent/organization. ii T eofContent abl 1.0 INTRODUCTION........................................................................................................................................................... 2 1.1 BASIC INTERNET TECHNICAL DETAILS ........................................................................................................................ 2 1.1.1 TCP/IP : Transmission Control Protocol/Internet Protocol .........................................

Words: 134858 - Pages: 540

Free Essay

Rute Linux Tutorial

...Find the one section of the market that, more or less by definition, doesn’t have any money, and try to sell to it. No. We sell to the affluent business traveler and his vacationing wife in a billion, billion different futures. This is the most radical, dynamic and thrusting business venture in the entire multidimensional infinity of space-time-probability ever.” ... Ford was completely at a loss for what to do next. “Look,” he said in a stern voice. But he wasn’t certain how far saying things like “Look” in a stern voice was necessarily going to get him, and time was not on his side. What the hell, he thought, you’re only young once, and threw himself out of the window. That would at least keep the element of surprise on his side. ... In a spirit of scientific inquiry he hurled himself out of the window again. Douglas Adams Mostly Harmless Strangely, the thing that least intrigued me was how they’d managed to get it all done. I suppose I sort of knew. If I’d learned one thing from traveling, it was that the way to get things done was to go ahead and do them. Don’t talk about going to Borneo. Book a ticket, get a visa, pack a bag, and it just happens. Alex Garland The Beach vi Chapter Summary 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Computing Sub-basics . . . . . . . . . . . . . . . . . . ....

Words: 159689 - Pages: 639