Microsoft out-of-band security bulletin for December 29, 2011 addresses .NET framework issues

Yesterday, Microsoft issued a security bulletin for the .NET issues mentioned the other day.  That document can be found here: http://technet.microsoft.com/security/bulletin/ms11-dec Critical Security Bulletins ============================   MS11-100   – Affected Software: – Windows XP Service Pack 3 – Microsoft .NET Framework 1.1 Service Pack 1 – Microsoft .NET Framework 2.0 Service Pack 2 – Microsoft .NET Framework 3.5 Service Pack …

Microsoft security advisory 2659883 announces DoS vulnerability in ASP.NET

Microsoft released Security Advisory 2659883 today which outlines a vulnerability in ASP.NET which could permit a Denial of Service. More information is available here: http://technet.microsoft.com/security/advisory/2659883 Two notes from that page listed as “Mitigating Factors”: By default, IIS is not enabled on any supported Windows operating system Sites that disallow application/x-www-form-urlencoded or multipart/form-data HTTP content types are not vulnerable Please visit the …

1

SECURE IT ALERT: Microsoft August Security Bulletin Update

Homeland Secure IT Alert for Wednesday, August 11, 2010 Microsoft has updated their August Security Bulletin as of August 10, 2010… A webcast is scheduled for 2:00 PM Eastern on August 11, 2010 – Register here The following information was provided courtesy of US-CERT National Cyber Alert System Technical Cyber Security Alert TA10-222A: Systems Affected Microsoft Windows Microsoft Office Internet Explorer …