The original Security Vulnerability Research & Defense (SVRD) blog was launched in 2007, with the intent of providing more information about vulnerabilities in Microsoft software, mitigations and workarounds and active attacks.
The blog is now expa…
On MondayIE8 RC1 was released. Here are some of the most interesting improvements and bug fixes to the XSS Filter feature:
Some byte sequences enabled the filter to be bypassed, depending on system locale
URLs containing certain byte sequences bypassed…
Periodically we get reports into the MSRC of stack exhaustion in client-side applications such as Internet Explorer, Word, etc. These are valid stability bugs that, fortunately, do not lead to an exploitable condition by itself (no potential for elevat…
This month we released an update for SMB that addresses three vulnerabilities. This blog post provides additional information that might help prioritize the deployment of this update, and help explain the risk for code execution.
In the bulletin you wi…
