The vulnerability could allow amalicious web site operator to read - butnot add, change or delete - certain types offiles on the computer of a visiting user.When a web server navigates a window fromone domain into another one, the IE securitymodel ch...

Microsoft has released a patch that eliminates two security vulnerabilities in Microsoft? Internet Explorer. The vulnerabilities involve how IE handles digital certificates; under a very daunting set of circumstances, they couldallow a malicious web ...

Microsoft has released a patch that eliminates a security vulnerability in the HTML Help facility that ships with Microsoft? Internet Explorer. Under certain conditions,the vulnerability could allow a malicious web site to take inappropriate action o...

Microsoft has released a patch that eliminates a security vulnerability in Microsoft? Internet Information Server 4.0. The vulnerability could allow a malicious user to consume all resources on a web server and prevent it from servicing other users (...

If a file on one of the affected web server products resides in a virtual directory whose name contains a legal file extension, the normal server-side processing of the file canbe bypassed. The vulnerability would manifest itself in different ways de...

Microsoft has released a patch that eliminates a security vulnerability in Microsoft? Internet Information Server. The vulnerability could be used to slow the performance of an affected server, or temporarily stop it altogether. Incompliance with RFC...

RFC 1738 specifies that web servers must allow hexadecimal digits to be input in URLs by preceding them with the so-called 'escape' character, a percent sign. IIS complies with this specification, but also accepts characters after the percent sign th...

A vulnerability has recently been discovered in Microsoft Excel 97 and Excel 2000. If an Excel worksheet containing the REGISTER.ID function references a malicious DLL (Dynamic Link Library) it can potentially cause code to run on a user?s computer w...

Microsoft has recently become aware of a potential Excel SYLK file security vulnerability. When symbolic link (SYLK) files containing macros are opened in Excel 2000, users do not receive the usual macro warning dialog box. These macros could potenti...

Upgrade to Dial-Up Networking in Windows 95 that addssupport for Point to Point tunneling protocol. Some users have reported problems with this upgrade.