DNS attack could signal Phishing 2.0   11 Dec 2007 13:12 GMT
Researchers at Google and Georgia Tech are warning that a new generation of DNS attacks could make phishing much harder to detect.

Source: Computerworld

MS07-069 - Critical: Cumulative Security Update for Internet Explorer (942615)   11 Dec 2007 08:00 GMT
Bulletin Severity Rating:Critical - This critical security update resolves four privately reported vulnerabilities. The most serious security impact could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Source: TechNet

MS07-068 - Critical: Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 and 944275)   11 Dec 2007 08:00 GMT
Bulletin Severity Rating:Critical - This critical security update resolves a privately reported vulnerability in Windows Media File Format. This vulnerability could allow remote code execution if a user viewed a specially crafted file in Windows Media Format Runtime. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Source: TechNet

MS07-067 – Important: Vulnerability in Macrovision Driver Could Allow Local Elevation of Privilege (944653)   11 Dec 2007 08:00 GMT
Bulletin Severity Rating:Important - This important security update resolves one publicly disclosed vulnerability. A local elevation of privilege vulnerability exists in the way that the Macrovision driver incorrectly handles configuration parameters. An attacker who successfully exploited t
Source: TechNet

MS07-066 – Important: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (943078)   11 Dec 2007 08:00 GMT
Bulletin Severity Rating:Important - This important security update resolves a privately reported vulnerability in the Windows kernel. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.
Source: TechNet

MS07-065 – Important: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)   11 Dec 2007 08:00 GMT
Bulletin Severity Rating:Important - This important security update resolves a privately reported vulnerability in Message Queuing Service (MSMQ) that could allow remote code execution in implementations on Microsoft Windows 2000 Server, or elevation of privilege in implementations on Windows 2000 Professional and Windows XP. An attacker must have valid logon credentials to exploit this vulnerability. An attacker could then install programs; view, change, or delete data; or create new accounts.
Source: TechNet

MS07-064 – Critical: Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)   11 Dec 2007 08:00 GMT
Bulletin Severity Rating:Critical - This critical security update resolves two privately reported vulnerabilities in Microsoft DirectX. These vulnerabilities could allow code execution if a user opened a specially crafted file used for streaming media in DirectX. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Source: TechNet

MS07-063 – Important: Vulnerability in SMBv2 Could Allow Remote Code Execution (942624)   11 Dec 2007 08:00 GMT
Bulletin Severity Rating:Critical - This important security update resolves a privately reported vulnerability in Server Message Block Version 2 (SMBv2). The vulnerability could allow an attacker to tamper with data transferred via SMBv2, which could allow remote code execution in domain configurations communicating with SMBv2.
Source: TechNet

Short Takes   10 Dec 2007 05:16 GMT
Short IT news items.

Source: Computerworld

Ex-Microsoft manager faces 20 years for doctoring expense reports   08 Dec 2007 14:00 GMT
Various scams involving domain-name registrations and expense reports may be the work of a former Microsoft manager, arrested Thursday on 18 counts of fraud.

Source: Computerworld