We released security update MS12-054 to address four privately reported issues in Windows networking components failing to properly handle malformed Remote Administration Protocol (RAP) responses. The most severe of these issues, CVE-2012-1851, is a fo…
Today we released nine security bulletins addressing 26 CVE’s (13 Microsoft and 13 Oracle CVE’s). Five of the bulletins have a maximum severity rating of Critical and the other four have a maximum severity rating of Important. We hope that the table be…
Today we released MS12-060, addressing a potential remote code execution vulnerability in MSCOMCTL.OCX, the binary included with a number of Microsoft products to provide a set of common ActiveX controls.
Limited, targeted attacks exploiting CVE-2012-1…
I just started to create a new web application. In the documentation, it is written that I have to prepare for the situation where users have disabled cookies. This is not the first time I have read this condition. Can anyone explain me wh…
Why does the password field not show the entered text?
When we enter password it shows … or ‘*’.
What are the security advantages of this?
When clicking on the any link in gmail or Facebook,it redirect to that link by some other ways.
What are the security advantage of new redirecting method used by gmail and Facebook?
It seems that they are mutually exclusive, as disabling one gives me the other, and vice versa. Two-factor auth for my SSH servers sounds really nice, so is there any way to accomplish this?
How can we create a certificate with the following Extended Key Usage extension using OpenSSL?
Extended Key Usage extension, critical, with a purpose containing Developer ID Installer Package Code Signing (1.2.840.113635.100.4.13)
Ap…
Now that we have announced the winners of the first BlueHat Prize competition, we wanted to provide some technical details on the top entries and explain how we evaluated their submissions. Speaking on behalf of the judges, it was great to see people t…
Vulnerabilities in on-line services, like cross-site scripting, cross-site request forgery, or even information disclosure, are important areas of focus for the Microsoft Security Response Center (MSRC). Over the last few years Microsoft has developed …
