Linked by Thom Holwerda on Fri 30th Mar 2007 11:08 UTC, submitted by Dan Warne
Windows As momentum grows around its new Windows Home Server line, which is due for release towards the end of this year, Microsoft is looking to keep the love flowing with its hardware partners, software developers and end users alike. Joel Sider, Senior Program Manager for Windows Home Server, told APC that the company intends to release a software development kit for the platform early next month.
Permalink for comment 226025
To read all comments associated with this story, please click here.
who wants to secure their files
by maceto on Fri 30th Mar 2007 20:17 UTC
maceto
Member since:
2005-07-06

One thing is that your IT dep don't, but I can't see a reason why a private user would choose so.

"Secunia reports a vulnerability in Windows Animated Cursor Handling. According to the linked article, the rating is "extremely critical".
http://secunia.com/advisories/24659/

"This security advisory is an updated and specific version of a previous advisory that Determina had published
on its "Zero-Day Vulnerabilities" page at http://www.determina.com/security_center/zero_day.asp.

In December 2006, Determina announced that it had found a number of new vulnerabilities affecting Microsoft Windows and related products. These were privately reported to Microsoft by Determina and no public information was released on how to exploit these vulnerabilities.

Today, Microsoft announced that they had found public exploits against one of these vulnerabilities - CVE-2007-0038. The problem relates to the processing of animated cursor icons, and the vulnerability is a buffer overflow in the processing code. Microsoft fixed a closely related vulnerability with their MS05-02 security update, but their fix was incomplete. Determina Security Research was able to bypass the patch and develop a proof-of-concept exploit that works on fully-patched Windows systems."

Oops...

Reply Score: -2