Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3


 
Thread Tools Search this Thread
Special Forums Windows & DOS: Issues & Discussions Security Advisories (RSS) - Microsoft Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3
# 1  
Old 03-11-2011
Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3

Revision Note: V1.1 (March 11, 2011): Revised Executive Summary to reflect investigation of limited, targeted attacks. Advisory Summary:Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure. This impact is similar to server-side cross-site scripting (XSS) vulnerabilities. Microsoft is aware of published information and proof-of-concept code that attempts to exploit this vulnerability. In addition, at this time, Microsoft is aware of public proof-of-concept code being used in limited, targeted attacks. Users who have applied the automated Microsoft Fix it solution described in Microsoft Knowledge Base Article 2501696 or manually applied the "Enable the MHTML protocol lockdown" workaround described in this advisory to their systems are not exposed to this vulnerability.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
HYPER-V(4)						   BSD Kernel Interfaces Manual 						HYPER-V(4)

NAME
hv_utils -- Hyper-V Utilities Driver SYNOPSIS
To compile this driver into the kernel, place the following lines in the system kernel configuration file: device hyperv DESCRIPTION
The hv_utils driver provides time keeping, shutdown and heartbeat functionality for FreeBSD guest partitions running on Hyper-V. Hyper-V is a hypervisor-based virtualization technology from Microsoft. The hv_utils driver is one of the core drivers required to be present in guest partitions running on Hyper-V. This driver provides the following functionalities to guest partitions: (a) Time Keeping: The clock inside the guest partition will remain accurate by synchronizing to the clock on the virtualization server via Timesync service, and with the help of the pluggable time source device. (b) Integrated shutdown: Guest partitions running FreeBSD can be shut down from Hyper-V Manager console by using the "Shut down" command. (c) Heartbeat: This feature allows the virtualization server to detect whether the guest partition is running and responsive. SEE ALSO
hv_ata_pci_disengage(4), hv_netvsc(4), hv_storvsc(4), hv_vmbus(4) HISTORY
Support for hv_utils first appeared in FreeBSD 10.0. The driver was developed through a joint effort between Citrix Incorporated, Microsoft Corporation, and Network Appliance Incorporated. AUTHORS
FreeBSD support for hv_utils was first added by Microsoft BSD Integration Services Team <bsdic@microsoft.com>. BSD
September 10, 2013 BSD