US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler

Grok Headline matches for US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler

RE: US-CERT Technical Cyber Security
Alert TA04-111A -- Vulnerabilities in
TCP

RE: US-CERT Technical Cyber Security
Alert TA04-111A -- Vulnerabilities in
TCP 04/26/2004 01:18 PM
soby_at_hushmail.com (Apr 24 2004)

Vulnerability in Internet Explorer ITS
Protocol Handler

Vulnerability in Internet Explorer ITS
Protocol Handler 04/09/2004 06:43 PM

Re: Microsoft Internet Explorer 6
Protocol Handler Vulnerability

Re: Microsoft Internet Explorer 6
Protocol Handler Vulnerability 08/06/2004 01:11 PM
Jouko Pynnonen (Aug 06 2004)

Microsoft Internet Explorer 6 Protocol
Handler Vulnerability

Microsoft Internet Explorer 6 Protocol
Handler Vulnerability 08/05/2004 04:08 PM
Robillard, Nicolas (Aug 05 2004)

BugTraq: Microsoft Internet Explorer 6
Protocol Handler Vulnerability

BugTraq: Microsoft Internet Explorer 6
Protocol Handler Vulnerability 08/05/2004 11:24 PM
SecurityFocus Aug 6 2004 2:58AM GMT

Re: Hysterical first technical alert
from US-CERT

Re: Hysterical first technical alert
from US-CERT 02/10/2004 02:35 PM
Shawn McMahon (Feb 08 2004)

Vulns: Microsoft Internet Explorer ITS
Protocol Zone Bypass Vulnerability

Vulns: Microsoft Internet Explorer ITS
Protocol Zone Bypass Vulnerability 04/11/2004 06:24 PM
SecurityFocus Apr 11 2004 11:18PM GMT

Security Update: [CSSA-2003-012.0]
Linux: KDE rlogin.protocol and
telnet.protocol url kio Vulnerability

Security Update: [CSSA-2003-012.0]
Linux: KDE rlogin.protocol and
telnet.protocol url kio Vulnerability 03/14/2003 08:39 PM
security_at_sco.com (Mar 14 2003)

iDEFENSE Security Advisory 04.12.05:
Microsoft Internet Explorer DHTML Engine
Race Condition Vulnerability

iDEFENSE Security Advisory 04.12.05:
Microsoft Internet Explorer DHTML Engine
Race Condition Vulnerability 04/12/2005 04:17 PM
Posted by iDEFENSE Labs, Apr 12 2005

CERT Recommends NOT Using Microsoft
Internet Explorer

CERT Recommends NOT Using Microsoft
Internet Explorer 06/27/2004 07:25 PM
Free Internet Press Jun 27 2004 10:11PM GMT

iDEFENSE Security Advisory 04.12.05:
Microsoft Windows Internet Explorer Long
Hostname Heap Corruption Vulnerability

iDEFENSE Security Advisory 04.12.05:
Microsoft Windows Internet Explorer Long
Hostname Heap Corruption Vulnerability 04/12/2005 04:17 PM
Posted by iDEFENSE Labs, Apr 12 2005

CERT Warns of Internet Vulnerability

CERT Warns of Internet Vulnerability 04/21/2004 02:29 PM
line56 Apr 21 2004 6:45PM GMT

Homeland Security Launches Cyber Alert
System

Homeland Security Launches Cyber Alert
System 01/29/2004 02:48 AM

iDEFENSE Security Advisory 12.21.04:
Multiple Vendor Xine version 0.99.2 PNM
Handler PNA_TAG Heap Overflow
Vulnerability

iDEFENSE Security Advisory 12.21.04:
Multiple Vendor Xine version 0.99.2 PNM
Handler PNA_TAG Heap Overflow
Vulnerability 12/22/2004 01:09 AM
customer service mailbox (Dec 21 2004)

The U.S. government's Computer Emergency
Readiness Team (US-CERT) is warning Web
surfers to stop using Microsoft's
Internet Explorer (IE) browser

The U.S. government's Computer Emergency
Readiness Team (US-CERT) is warning Web
surfers to stop using Microsoft's
Internet Explorer (IE) browser 06/30/2004 12:53 PM
kehoittanut

internetnews.com/security/article.php/3374931
track this site | 6 links

iDEFENSE Security Advisory 12.21.04:
Multiple Vendor Xine version 0.99.2 PNM
Handler Negative Read Length Heap
Overflow Vulnerability

iDEFENSE Security Advisory 12.21.04:
Multiple Vendor Xine version 0.99.2 PNM
Handler Negative Read Length Heap
Overflow Vulnerability 12/22/2004 01:09 AM
customer service mailbox (Dec 21 2004)

Alert: New Internet Explorer Threat
Defused by BHO Cop

Alert: New Internet Explorer Threat
Defused by BHO Cop 07/01/2004 05:25 AM
Pcmag.com - Thu Jul 1, 08:40 am GMT

Security Alert: Another IE6
Vulnerability

Security Alert: Another IE6
Vulnerability 11/25/2002 11:55 AM
A new exploit has been found in IE6 that allows a serious security vulnerability. Although this is not directly related to PHP Freaks, I thought I would take a moment to point this out to our readers.

Internet Explorer wininet.dll URL
parsing memory corruption technical
details

Internet Explorer wininet.dll URL
parsing memory corruption technical
details 04/14/2005 01:03 PM
Posted by 3APA3A, Apr 14 2005

NetBSD Security Advisory 2004-006: TCP
protocol and implementation
vulnerability

NetBSD Security Advisory 2004-006: TCP
protocol and implementation
vulnerability 04/21/2004 07:53 PM
NetBSD Security-Officer (Apr 21 2004)

Internet Explorer Vulnerability

Internet Explorer Vulnerability 09/18/2004 10:48 AM

Direct and Related Links for 'Internet Explorer Vulnerability'

“WESTPOINT has reported a vulnerability in Internet Explorer, which potentially can be exploited by malicious people to conduct session fixation attacks. In Internet Explorer successful exploitation requires that the domain does not end in “.com”, “.net”, “.mil”, “.org”, “.gov”, “.edu”, nor “.int” and the secondary part has more than two characters (e.g. “.plc.uk”). For more information: SA12341 Solution: Do not follow untrusted links.”…

RE: Internet Explorer URL parsing
vulnerability

RE: Internet Explorer URL parsing
vulnerability 12/10/2003 01:52 PM
http-equiv_at_excite.com (Dec 09 2003)

A new MS Internet Explorer vulnerability
is discovered

A new MS Internet Explorer vulnerability
is discovered 12/10/2003 06:51 AM
Interent Explorer can be tricked

zapthedingbat.com/security/ex01/vun1.htm
track this site | 7 links

Internet explorer .clsid vulnerability

Internet explorer .clsid vulnerability 05/20/2004 05:30 PM
roozbeh afrasiabi (May 20 2004)

Re: Internet Explorer URL parsing
vulnerability

Re: Internet Explorer URL parsing
vulnerability 12/09/2003 03:45 PM
soulshok_at_hippie.dk (Dec 09 2003)

Internet Explorer URL Spoofing
Vulnerability

Internet Explorer URL Spoofing
Vulnerability 12/19/2003 11:24 AM
This information has made the rounds already but a few of you have sent me e-mail asking about the vulnerability...

RE: Internet explorer .clsid
vulnerability

RE: Internet explorer .clsid
vulnerability 05/21/2004 01:00 PM
Thor Larholm (May 20 2004)

Internet Explorer URL parsing
vulnerability

Internet Explorer URL parsing
vulnerability 12/09/2003 01:22 PM
bugtraq_at_zapthedingbat.com (Dec 09 2003)

Internet Explorer Frame Injection
Vulnerability

Internet Explorer Frame Injection
Vulnerability 07/02/2004 08:31 AM
“Mark Laurence has discovered a 6 year old vulnerability in Microsoft Internet Explorer, allowing malicious people to spoof the content of websites. The problem is that Internet Explorer doesn’t check if a target frame belongs to a website containing a malicious link, which therefore doesn’t prevent one browser window from loading content in a named frame in another window. Successful exploitation allows a malicious website to load arbitrary content in an arbitrary frame in another browser window owned by e.g. a trusted site. Secunia has constructed a test, which can be used to check if your browser is affected by this issue. This vulnerability is similar to an old vulnerability fixed by MS98-020 in Internet Explorer version 3 and 4. The vulnerability has been confirmed in a fully patched Internet Explorer 6 running on Microsoft Windows XP. Other versions of Internet Explorer may also be affected. Solution: Disable the following security setting: ‘Navigate sub-frames across different domains’. [Tools/Internet Options/Security tab in an Internet Explorer windows or Internet Options/Security tab from Control Panel.] Do not visit or follow links from untrusted websites.”

Temporary solution for Internet Explorer
Vulnerability

Temporary solution for Internet Explorer
Vulnerability 04/11/2004 05:01 PM

SANS - Internet Storm Center -
Cooperative Cyber Threat Monitor
And Alert System - Current Infosec
News and Analysis

SANS - Internet Storm Center -
Cooperative Cyber Threat Monitor
And Alert System - Current Infosec
News and Analysis 08/19/2004 08:15 AM
SANS - Internet Storm Center - Cooperative Cyber Threat Monitor And Alert System - Current Infosec News and Analysis .. 20 minutes .. graph

isc.sans.org/survivalhistory.php
track this site | 4 links

CERT Airs Serious Flaws in OpenSSL
Protocol

CERT Airs Serious Flaws in OpenSSL
Protocol 08/05/2002 10:43 PM
The software engineering watchdog discloses some nasty holes in the OpenSSL security software.

Re: Microsoft Internet Explorer ImageMap
URL Spoof Vulnerability

Re: Microsoft Internet Explorer ImageMap
URL Spoof Vulnerability 05/17/2004 05:58 PM
thegeekmeister_at_SAFe-mail.net (May 17 2004)

Microsoft Internet Explorer ImageMap URL
Spoof Vulnerability

Microsoft Internet Explorer ImageMap URL
Spoof Vulnerability 05/17/2004 02:44 PM
Kurczaba Associates advisories (May 17 2004)

Microsoft Internet Explorer Drag and
Drop Vulnerability

Microsoft Internet Explorer Drag and
Drop Vulnerability 08/19/2004 09:51 AM

Direct and Related Links for 'Microsoft Internet Explorer Drag and Drop Vulnerability'

Another reason to switch. “Critical: Highly critical Impact: System access Where: From remote Software: Microsoft Internet Explorer 5.01, Microsoft Internet Explorer 5.5, Microsoft Internet Explorer 6. http-equiv has discovered a vulnerability in Microsoft Internet Explorer, which can be exploited by malicious people to compromise a user’s system….http-equiv has posted a PoC (Proof of Concept), which plants a program in the startup directory when a user drags a program masqueraded as an image. NOTE: Even though…

Microsoft Internet Explorer BMP file
memory DoS vulnerability

Microsoft Internet Explorer BMP file
memory DoS vulnerability 04/13/2004 01:58 AM
Arman Nayyeri (Apr 10 2004)

Internet Explorer Code Execution Bypass
Vulnerability

Internet Explorer Code Execution Bypass
Vulnerability 12/19/2004 03:48 PM
aikon none (Dec 17 2004)

Microsoft issues updates to close
serious Internet Explorer vulnerability

Microsoft issues updates to close
serious Internet Explorer vulnerability 07/04/2004 09:54 PM

BugTraq: Re: Microsoft Internet Explorer
ImageMap URL Spoof Vulnerability

BugTraq: Re: Microsoft Internet Explorer
ImageMap URL Spoof Vulnerability 05/28/2004 12:27 AM
SecurityFocus May 28 2004 5:13AM GMT
Grok Description matches for US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler
GrokA matches for US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler

Do you really need a .NET cert?

Do you really need a .NET cert? 02/07/2003 01:31 AM
CNET Feb 7 2003 1:24AM ET

US-CERT

US-CERT 01/28/2004 05:39 PM
US-CERT
http://www.us-cert.gov/

US-CERT, a partnership between the Department of Homeland Security's National Cyber Security Division (NCSD) and the private sector, has been established to protect our Nation's Internet infrastructure. It will do this through global coordination of defense against and response to cyber incidents and attacks across the United States. US-CERT's objectives are to aggregate available cyber security information and provide it to individuals and organizations in a timely and understandable manner.

US-CERT also provides a mechanism that allows citizens, businesses, and other institutions to communicate directly with the United States government regarding cyber security information. US-CERT has created the National Cyber Alert System, which is America's first cohesive national cyber security system for identifying, analyzing, and prioritizing emerging vulnerabilities and threats. The system provides credible and timely information on cyber security issues for both technical and non-technical users.

CERT RSS

CERT RSS 04/17/2004 03:21 PM

US-CERT RSS Channels: The U.S. Computer Emergency Readiness Team uses RSS.

US-CERT publishes a number of XML RSS 1.0 format files containing headlines about recently published US-CERT documents, including Technical Alerts, Alerts, Bulletins, and Tips.

C lick here to comment on this entry

Cert.?

Cert.? 08/19/2004 08:51 PM
So the question on Grokster-watchers' minds: Cert? (For non-lawyers: will the Supreme Court hear this case?) My guess is yes, for 5 reasons, ranging from more to less legal: 1. These is a stated legal conflict on the Sony standard as between the 7th and 9th Circuits; 2. The 7th...

US-CERT: Beware of IE

US-CERT: Beware of IE 06/29/2004 01:38 PM
Internet News Jun 29 2004 4:58PM GMT

CERT Recommends XP SP2

CERT Recommends XP SP2 09/02/2004 08:42 AM
CERT has issued a recommendation that Microsoft XP customers upgrade to Windows XP Service Pack 2 (SP2) using Automatic Update/Windows Update. But at the same time, CERT advocates users first back up their data and consult their PC maker's Web sites before proceeding with any SP2 installation.

Changes to CERT Advisories

Changes to CERT Advisories 01/28/2004 01:32 PM

CERT recommends anything but IE

CERT recommends anything but IE 06/28/2004 06:54 AM
Safer surfing

Do you really need a .NET cert to be a
success?

Do you really need a .NET cert to be a
success? 02/04/2003 02:27 AM
CNET Feb 4 2003 1:24AM ET

KFile-Cert 0.1

KFile-Cert 0.1 06/14/2004 08:28 AM
A KFile (KDE) plugin for X.509 certificate files.

Micah on Schiavo

Micah on Schiavo 03/22/2005 03:37 PM
As the American government loses whatever tiny shred of genuine decency it had and as the American media loses its last breath of proportionality, Micah Sifry blogs about how the Schiavo affair ever made it out of the waiting room where a devastated family was faced with a tragic choice. [Technorati tag: schiavo]...

CERT Warns of SIP Vulnerabilities

CERT Warns of SIP Vulnerabilities 02/21/2003 03:42 PM
The text-based signaling protocol contains numerous security bugs that could lead to denial-of-service attacks.

CERT: IE bug is bait for phishers

CERT: IE bug is bait for phishers 06/15/2004 09:51 AM

CERT Amends DNS Flaw Fix

CERT Amends DNS Flaw Fix 09/03/2002 11:37 AM
The advisory center has found that a previous fix for buffer overflow exploits in DNS resolver libraries is not sufficient.

CERT: Sendmail Hacked

CERT: Sendmail Hacked 10/09/2002 09:46 AM
Some copies of the source code for Sendmail has been hacked by an intruder and now contain a Trojan horse.

CERT: Sendmail Hacked

CERT: Sendmail Hacked 10/11/2002 07:56 AM
Internet News Oct 10 2002 0:40AM ET

CERT Warns of SSH Vulnerabilities

CERT Warns of SSH Vulnerabilities 12/17/2002 09:38 AM
In severe cases, CERT warned that remote attackers could execute arbitrary code with the privileges of the Secure Shell process.

US-CERT Urges All To Install XP SP2

US-CERT Urges All To Install XP SP2 09/02/2004 09:41 PM
TechWeb Sep 3 2004 2:21AM GMT

CERT Recommends Mozilla, Firefox

CERT Recommends Mozilla, Firefox 06/27/2004 01:05 PM

IBM and SuSE win key Linux security cert

IBM and SuSE win key Linux security cert 01/22/2004 12:55 PM
Personal Computer World Jan 22 2004 5:43PM GMT

CERT Recommends NonIE Browsing

CERT Recommends NonIE Browsing 06/30/2004 04:10 PM
"The U.S. Computer Emergency Response Team, the official U.S. body responsible for defending against online threats, also advised security administrators to consider moving to a non-Microsoft browser among six possible responses."

VeriSign dead cert causes net
instability

VeriSign dead cert causes net
instability 01/10/2004 12:28 AM
NAV gets lost in translation

CERT Recommends SP2 But Urges Caution

CERT Recommends SP2 But Urges Caution 09/02/2004 07:25 PM
While the U.S. Computer Emergency Readiness Team cites "significant changes to improve the security of Windows XP," it also advises users to back up data and consult with manufacturers on compatibility issues.

CERT Reports Flaws in Compaq GUI

CERT Reports Flaws in Compaq GUI 07/11/2002 12:06 PM
Two vulnerabilities in Common Desktop Environment could allow hackers to pose a denial-of-service attack.

US-CERT: Critical Flaws in libpng

US-CERT: Critical Flaws in libpng 08/05/2004 10:21 AM
Multiple vulnerabilities in the popular PNG reference library puts users at risk of malicious hacker attacks.

CNCERT/CC And ISC Form CERT Community

CNCERT/CC And ISC Form CERT Community 03/28/2005 01:42 AM
ChinaTechNews.com Mar 28 2005 5:53AM GMT

Mudville Gazette: Micah Wright

Mudville Gazette: Micah Wright 05/02/2004 02:01 PM
Greyhawk has something to say .. Mudville Gazette .. Greyhawk

mudvillegazette.com/archives/000956.html
track this site | 4 links

First Geronimo code released, cert tests
set for May

First Geronimo code released, cert tests
set for May 05/04/2004 12:31 PM
Geronimo, Apache's open source J2EE project, is quietly making a ton of progress. Late last week, after nine months of development work, Apache released its first set of code for Geronimo. Further, Geronimo devs say they will begin self-certification J2EE tests this month, with hopes they'll be fully compliant this summer.

US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler

The following phrases have been identified by the grok system as matching this entry: us-cert micah