Tuesday, July 14, 2009
Dave Forstrom, who is a group manager and part of Microsoft's Security Response Center, said in a blog post earlier "Specifically, the vulnerability exists in the Spreadsheet ActiveX control and while we've only seen limited attacks, if exploited successfully, an attacker could gain the same user rights as the local user."
The ActiveX control is just a small add-on program which works in your web browser. It facilitates functions like downloading things like security updates or programs. But it has been seen over the years that the controls have become prone to vulnerabilities. The new flaw in the system happened the day before Microsoft was going to release it's monthly patches which included another patch for zero-day vulnerability. That problem had to do with the Video ActiveX control found within Internet Explorer. Hackers are currently attempting to use this in drive-by download attempts.
Microsoft, who has set patching schedule, has strayed off and issued a patch out of cycle for cases of especially dangerous vulnerabilities. According to Microsoft, the flaw could allow an attacker to execute code remotely on a machine if someone using Internet Explorer goes to a hazardous web site, a hacking technique known as a drive-by download. Some websites, especially ones that have user-provided content or advertisements, could be rigged to take advantage of the vulnerability. "In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to persuade users to visit web site., typically by getting them to click a link in an e-mail message or Instant Messenger message that takes users to the attacker's web site." according to the advisory.
Microsoft has issued a list of affected software. This list includes Office XP Service Pack 3, 2003 Service Pack 3, multiple versions of Internet Security and Acceleration Server and Office Small Business Accounting 2006 as well as others. However, until a patch is ready, Microsoft said one option for their administrators is to disable Office Web Components from running in Internet Explorer which they have even provided instructions on.
Thursday, July 9, 2009
Dell Latitude D610 Laptop
- Price - $350.00
- Intel Pentium M 1.86GHz Processor
- 1GB DDR2 RAM
- ATI Radeon X300 Video Card
- 14.1" (1400x1050) LCD Screen
- 40GB 5400RPM Hard Drive
HP Compaq TC4200 Tablet Laptop
- Price - $575.00
- Intel Pentium M 1.73GHz Processor
- 40GB 5400RPM Hard Drive
- 12.1" (1024x768) LCD Screen
- Features A Tablet Screen for on screen writing with use of table pen.
"HP NX9010 Laptop
- Price - $235.00
- Intel Pentium IV 2.4GHz Processor
- 1GB DDR2 RAM
- 40GB 4200RPM Hard Drive
- 15.0" (1024x768) LCD Screen
Wednesday, July 1, 2009
If you're looking for a high quality projector, look no further than the 2000 BenQ MP620c 2000 Lumen DLP Projector. This refurbished projector is being offered from a Tech Army member for only $445.00 plus free ground shipping - an unbelievable price.
The projector has been described by tech experts as having everything from "outstanding quality" to being "well worth the cost" and with all of the features it has to offer, that is not surprising. The projector, which is square and a bluish color with aluminum buttons and lens chamber, has lots of room for many different connections including D-Sub in and D-sub out, analog, S-video, a 3.5 mm audio jack, a centrally located DVI-I dual link in, and a USB mini(B) jack. Brightness is 2000:1 ANSI Lumen, contrast is 700:1, and light source power is 285 watts. In addition, the projector has lots of extra features to offer. These include: key lock to prevent accidental shut-down, on-screen alerts and timers, eco-mode technology, SRGB color profile, freeze frame, and auto input search. It works with both PCs and Macs and has a very quick rebooting time along with twin fans for cooling.
To learn more or purchase the BenQ MP620c, visit the Tech Army website at Tech-Army.org!
Considering a Security Camera System for your School, Office, Warehouse, or Retail Store? Then call 877-422-1907 today for a free phone consultation and ask about our full line of GeoVision Hybrid DVR/NVR Security Solutions.