Critical Internet Explorer Cumulative Patch Fixes Two Vulnerabilities

Severity: High

10 June, 2008

Summary:

• This vulnerability affects: Internet Explorer 7 and earlier versions
• How an attacker exploits it: By enticing one of your users to visit a malicious Web page
• Impact: In the worst case, the attacker can execute code on your user’s computer, gaining complete control of it
• What to do: Deploy the appropriate Internet Explorer patches immediately

Severity: High

10 June, 2008

Summary:

• These vulnerabilities affect: All current versions of Windows
• How an attacker exploits them: Multiple vectors of attack, including sending specially crafted packets or enticing your users into downloading and playing media files
• Impact: Various results; in the worst case, attacker can gain complete control of your Windows computer
• What to do: Install the appropriate Microsoft patches immediately

Exposure:

Today, Microsoft released six security bulletins describing vulnerabilities that affect Windows and components shipping with it. Each vulnerability affects different versions of Windows to a different extent. However, a remote attacker could exploit the worst of these flaws to gain complete control of your Windows PCs. The summary below lists the vulnerabilities in order from highest to lowest severity.

MS08-033: Two DirectX Remote Code Execution Vulnerabilities

Severity: High

5 June, 2008

Summary:

• This vulnerability affects: Hewlett-Packard desktop and laptop computers running Windows
• How an attacker exploits it: By luring one of your users to a maliciously crafted website, where a drive-by download occurs
• Impact: The attacker can take complete control of your user’s computer
• What to do: Either set the kill bit for the vulnerable ActiveX control, or update your HP Instant Support software to version 1.0.0.24

Exposure:

Hewlett-Packard (HP) is the world’s largest PC dealer. HP has sold millions of desktop and laptop computers, and according to industry observers, accounts for as much as 20 percent of the PC market. Somewhere among your users, it is probable that an HP computer regularly connects to your network. If you have no HP computers on your network, this security alert does not pertain to you.

Severity: Medium

21 May, 2007

Summary:

• These vulnerabilities affect: Cisco IOS 12.4 devices with SSH enabled
• How an attacker exploits them: By sending specially crafted SSH packets
• Impact: An attacker could repeatedly reboot your Cisco IOS device, keeping it offline for as long as he could sustain his attack
• What to do: Download and install the appropriate Cisco update as soon as possible

Exposure:

Cisco’s IOS software is the operating system that runs on most Cisco routers and switches. The IOS operating system provides network services for managing Cisco devices, and processes the network traffic passing through the device. IOS also ships with an optional SSH server that allows you to securely manage your IOS device via an encrypted Command Line Interface (CLI).

Dell has releases the 2nd generation Vostro Laptops:

Second-Generation Updates

• Thinnger and lighter for easier portability
• Gigabit NIC for fast Network Connectivity
• Fingerprint Reader for Enchanced Security
• Slot-loading optical drives for the latest in Innovation and design

New Vostro Models

• Vostro 1310
• Vostro 1510
• Vostro 1710