<body>
virus protection

Free spyware removal and spyware protection

Unfortunately, defeating spyware is harder than evading conventional viruses.
Spyware is any potentially-unwanted program that makes undesirable changes to your computer and/or collects information about user activities, without consent, usually for financial gain. That definition may be fine in the abstract, but making concrete decisions about which programs are really spyware can he difficult.
Please visit the download section of this website and you will find a few simple and FREE applications written by different authors in which I have found throughout the years of facing spyware and viruses over 100 times, to be the most affective and free of course, way to keep your computer clean of worms, popups, spyware and other malicious computer bugs. ( If your computer is already affected, these programs might not completely get rid of your problem, but it will prevent from any more damage. I my self have tested these simple and free applications many times, on hundreds of PC computers, and I am happy to share my years of extensive research and trial and error to help you live a bug free pc lifestyle.

Microsoft MJPEG Decoder Vulnerability malicious file buffer overflow

Wednesday, July 2, 2008

Description

Windows is an industry-standard operating system developed by Microsoft. A vulnerability in Microsoft DirectX may allow for remote code-execution attacks. The vulnerability lies in the processing of specially crafted MJPEG streams in AVI or ASF files. A user would have to open a malicious file or visit a Web site streaming a malicious file for an attack to occur.




Type - Buffer Overflow
Impact of exploitation - Remote Code Execution
User Interaction - no user interaction is needed
Attack Vector - Maliciously Crafted File
Rating - Medium
CVE reference - CVE-2008-0011,
Vendor Status - Responded and patched

Vulnerable systems
Windows 2000 Sp4,
Windows XP SP3,
Windows 2003 Sp2,
Windows Vista SP0,
Windows Server 2008

Summary
A vulnerability in Microsoft DirectX may allow for remote code-execution attacks.

Recommendations -

Download and install the patch available from Microsoft (951698): http://www.microsoft.com/technet/security/Bulletin/MS08-033.mspx
posted by Mandy, 8:04 PM | link | 0 comments |