Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -


 
Thread Tools Search this Thread
Special Forums Windows & DOS: Issues & Discussions Security Advisories (RSS) - Microsoft Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -
# 1  
Old 12-14-2010
Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

Revision Note: V3.0 (December 14, 2010) Added the following Microsoft Security Bulletins to the Updates relating to Insecure Library Loading section: MS10-093, "Vulnerability in Windows Movie Maker Could Allow Remote Code Execution;" MS10-094, "Vulnerability in Windows Media Encoder Could Allow Remote Code Execution;" MS10-095, "Vulnerability in Microsoft Windows Could Allow Remote Code Execution;" MS10-096, "Vulnerability in Windows Address Book Could Allow Remote Code Execution;" and MS10-097, "Insecure Library Loading in Internet Connection Signup Wizard Could Allow Remote Code Execution." Advisory Summary:Microsoft is aware that research has been published detailing a remote attack vector for a class of vulnerabilities that affects how applications load external libraries.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
OPENPAM_LOG(3)						   BSD Library Functions Manual 					    OPENPAM_LOG(3)

NAME
openpam_log -- log a message through syslog LIBRARY
Pluggable Authentication Module Library (libpam, -lpam) SYNOPSIS
#include <sys/types.h> #include <security/pam_appl.h> #include <security/openpam.h> void openpam_log(int level, const char *fmt, ...); DESCRIPTION
The openpam_log function logs messages using syslog(3). It is primarily intended for internal use by the library and modules. The level argument indicates the importance of the message. The following levels are defined: PAM_LOG_DEBUG Debugging messages. These messages are normally not logged unless the global integer variable openpam_debug is set to a non-zero value, in which case they are logged with a syslog(3) priority of LOG_DEBUG. PAM_LOG_VERBOSE Information about the progress of the authentication process, or other non-essential messages. These messages are logged with a syslog(3) priority of LOG_INFO. PAM_LOG_NOTICE Messages relating to non-fatal errors. These messages are logged with a syslog(3) priority of LOG_NOTICE. PAM_LOG_ERROR Messages relating to serious errors. These messages are logged with a syslog(3) priority of LOG_ERR. The remaining arguments are a printf(3) format string and the corresponding arguments. SEE ALSO
pam(3), printf(3), syslog(3) STANDARDS
The openpam_log function is an OpenPAM extension. AUTHORS
The openpam_log function and this manual page were developed for the FreeBSD Project by ThinkSec AS and Network Associates Laboratories, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (``CBOSS''), as part of the DARPA CHATS research program. BSD
December 18, 2011 BSD