Yet Another Highly Critical Zero-day

deary65

QUOTE
Microsoft's Internet Explorer, which was just patched with 10 fixes two weeks ago, suffers from yet another zero-day vulnerability that can be exploited remotely, security firm Symantec said Monday.

In an alert to customers of its DeepSight threat system, Symantec cited a vulnerability...by researcher Michal Zalewski, who notes that IE is prone to memory corruption because of the way it handles malformed HTML.

HTML content that contains nested tags without the corresponding closure tags...can trigger the bug. "An attacker could exploit this issue via a malicious web page to potentially execute arbitrary code in the context of the currently logged-in user..."If the attack is successful, the executable content will be executed. Failed exploit attempts will likely crash the affected application."

A fully-patched version of IE 6 for Windows XP SP2 -- the most-secure production version of Microsoft's browser -- is open to the attack.
http://www.techweb.com/article/printableArticle.jhtml?articleID=186700456&site_section=700028
http://secunia.com/advisories/19762/


QUOTE
Microsoft piracy check comes calling
By Joris Evers
Staff Writer, CNET News.com
Published: April 24, 2006, 4:10 PM PDT

Starting Tuesday, the software maker will push out a test tool that checks whether the copy of Windows a PC is using is properly licensed...Following download and installation of the "Windows Genuine Advantage Notifications" tool, users of a pirated copy will see alerts at startup, login and during their use of the operating system. The alerts read: "This copy of Windows is not genuine; you may be a victim of software counterfeiting." Those who use a legitimate copy of the software won't see any messages,...
http://news.com.com/Microsoft+piracy+check+comes+calling/2100-1016_3-6064555.html?tag=cd.lede