Thursday, August 23, 2012

ZDI-12-158 : Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability

bugtraq logo Bugtraq mailing list archives

??By Date?? ????? ??By Thread?? ????? ZDI-12-158 : Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability
From: ZDI Disclosures <zdi-disclosures () tippingpoint com>
Date: Wed, 22 Aug 2012 16:23:18 +0000

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1  ZDI-12-158 : Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-158 August 22, 2012  - -- CVE ID: CVE-2012-1891  - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P  - -- Affected Vendors: Microsoft  - -- Affected Products: Microsoft Internet Explorer 9  - -- TippingPoint(TM) IPS Customer Protection: TippingPoint IPS customers have been protected against this vulnerability by Digital Vaccine protection filter ID 10761. For further product information on the TippingPoint IPS, visit:      http://www.tippingpoint.com  - -- Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  The specific flaw exists within the MSADO component. When handling the a user specified CacheSize property the process uses this value to calculate the 'real' cache size. This value is used without proper validation. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser. This bug is a failed fix for CVE-2011-0027 / http://www.zerodayinitiative.com/advisories/ZDI-11-002/   - -- Vendor Response: Microsoft has issued an update to correct this vulnerability. More details can be found at: http://technet.microsoft.com/en-us/security/bulletin/ms12-045  - -- Disclosure Timeline: 2012-02-13 - Vulnerability reported to vendor 2012-08-22 - Coordinated public release of advisory  - -- Credit: This vulnerability was discovered by: * Anonymous  - -- About the Zero Day Initiative (ZDI): Established by TippingPoint, The Zero Day Initiative (ZDI) represents  a best-of-breed model for rewarding security researchers for responsibly disclosing discovered vulnerabilities.  Researchers interested in getting paid for their security research through the ZDI can find more information and sign-up at:      http://www.zerodayinitiative.com  The ZDI is unique in how the acquired vulnerability information is used. TippingPoint does not re-sell the vulnerability details or any exploit code. Instead, upon notifying the affected product vendor, TippingPoint provides its customers with zero day protection through its intrusion prevention technology. Explicit details regarding the specifics of the vulnerability are not exposed to any parties until an official vendor patch is publicly available. Furthermore, with the altruistic aim of helping to secure a broader user base, TippingPoint provides this vulnerability information confidentially to security vendors (including competitors) who have a vulnerability protection or mitigation product.  Our vulnerability disclosure policy is available online at:      http://www.zerodayinitiative.com/advisories/disclosure_policy/  Follow the ZDI on Twitter:      http://twitter.com/thezdi  -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 10.2.0 (Build 1950) Charset: utf-8  wsBVAwUBUDUHcVVtgMGTo1scAQILrgf/aH/JINoyJwdDIbMV5vsllkW6NktM1NPS ax9+zRYjY2UCS9JT+Q6iW7f0AQNFkuCLojff385mtrMvYrZiFbHbiUoFUiA2yUOF KWWe9nsVN9m8kbM4YUQ3l4e5HmEoyhPzt7z3wHSxE5bXiTR1Bnw07UguLA/M/xuY hJGJ1gngFztkUepQ6szAk3VDUlLGMx8gWBgIHbFfqQNMOb3pZWKtOl20Ov/eO567 PT1KNfAdMJtgEa7ypBpuF6PBbcHJDlLMfIfTlRAW5zn7KBaU/DvdjZdKD4+A6IvV K8SMLB8j/AzsQ7ZVjO2CnwYe9uuqn4/NV5TUugCm4BNUIGLQJD6qBA== =uvhX -----END PGP SIGNATURE-----  

??By Date?? ????? ??By Thread??

Current thread:
  • ZDI-12-158 : Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability ZDI Disclosures (Aug 23)

Source: http://seclists.org/bugtraq/2012/Aug/154

marion barber syracuse ohio state girl with the dragon tattoo ohio state basketball collateral dick cheney heart

New Obama ad features a surprise appearance by Donald Trump's jet (Washington Bureau)

Share With Friends: Share on FacebookTweet ThisPost to Google-BuzzSend on GmailPost to Linked-InSubscribe to This Feed | Rss To Twitter | Politics - Top Stories News, RSS Feeds and Widgets via Feedzilla.

Source: http://news.feedzilla.com/en_us/stories/politics/top-stories/242733899?client_source=feed&format=rss

correspondents dinner 2012 white house correspondents dinner 2012 whcd 2012 nfl draft kevin durant jazz fest zurich classic

Obama shifts to Ryan education plan

President Barack Obama speaks at Capital University, Tuesday, Aug. 21, 2012, in Columbus, Ohio. Obama is traveling to Ohio and Nevada for campaign events. (AP Photo/Tony Dejak)

President Barack Obama speaks at Capital University, Tuesday, Aug. 21, 2012, in Columbus, Ohio. Obama is traveling to Ohio and Nevada for campaign events. (AP Photo/Tony Dejak)

Republican vice presidential candidate, Rep. Paul Ryan, R-Wis. pauses during a campaign rally at Beaver Steel in Carnegie, Pa., Tuesday, Aug. 21, 2012. (AP Photo/John Heller

President Barack Obama speaks during a campaign event at Capital University, Tuesday, Aug. 21, 2012, in Columbus, Ohio (AP Photo/Carolyn Kaster)

Republican vice presidential candidate, Rep. Paul Ryan, R-Wis. greets supports during a campaign rally at Beaver Steel in Carnegie, Pa., Tuesday, Aug. 21, 2012. (AP Photo/John Heller

Vice President Joe Biden greets supporters as one hands him a copy of the book "Joe Biden" after he addressed a grassroots rally, Tuesday, Aug. 21, 2012, in Minneapolis. (AP Photo/Jim Mone)

(AP) ? President Barack Obama accused rival Mitt Romney of being oblivious to the burdens of paying for college on Tuesday, telling young voters in battleground Ohio that his opponent's education policies amount to nothing more than encouraging them to tap their parents for money or "shop around" for the best deal.

"That's his plan. That's his answer to young people who are trying to figure out how to go to college and make sure that they don't have a mountain of debt," Obama said at Capital University in Columbus. "Not everybody has parents who have the money to lend. That may be news to some folks."

Turning to young voters, a key part of his 2008 coalition, the president sought to draw a bright line with Romney on education policy in his latest attempt to meld Romney with the House Republican budget blueprint offered Rep. Paul Ryan, Romney's running mate.

Obama and Romney remain locked in a tight presidential campaign a week before the former Massachusetts governor formally claims his party's nomination at the GOP convention in Tampa, Fla. Both campaigns have broadened their message to voters in recent weeks beyond the economy, which remains the most pivotal issue for voters less than three months before the election.

Romney sought to distance himself from Missouri GOP Senate nominee Todd Akin, who apologized after saying in an interview that women's bodies are sometimes able to prevent pregnancies after what he called "a legitimate rape." Romney said in a statement that fellow Missouri Republicans had urged Akin to quit and "I think he should accept their counsel and exit the Senate race."

Romney was raising money to bolster his campaign in Texas, where he told donors that his campaign was "a little wiser in our spending of dollars" than Obama's campaign, pointing to new finance documents released by Obama's campaign on Monday that showed it spent more money in July than it brought in.

Romney and Republicans have outraised Obama and Democrats for the past three months, a sign of broad GOP interest in defeating the incumbent president.

"I'm not managing their campaign for them, but we're going to spend our money wiser," Romney said in Houston, where he was expected to pull in more than $6 million. "We're going to spend it to win."

In a nod to oil-rich Texas, Romney told donors he planned to announce a "comprehensive energy plan" during a stop in New Mexico later this week but offered few details beyond a focus in part on fossil-based fuels. Romney said his aim was to "fully take advantage of our energy resources."

Romney's campaign countered the president's education critique, saying college costs had skyrocketed under Obama's watch and his economic policies had made it difficult for recent college graduates to find work. Romney spokeswoman Amanda Henneberg said Obama's policies were "just more of the same from a president who hasn't fixed the economy or kept his promises to the young people who supported him four years ago."

Obama's line of criticism dovetailed with his campaign's unrelenting effort to cast Romney as out of touch, playing off his wealth and his background in private equity. Ryan, meanwhile, sought to reassure voters about his and Romney's stance on Medicare and sustained the GOP's efforts to cast Obama as a divisive figure.

Ryan tried to blunt criticism of his plan to overhaul Medicare, saying his plan would protect the program for seniors' grandchildren.

"You're going to hear a whole lot of distortions because that's all he has to offer," Ryan told a rally in the hull of Beaver Steel near Pittsburgh. He reminded voters in western Pennsylvania of a comment Obama made during the 2008 campaign, saying some voters in small towns "cling to guns or religion."

"I'm a Catholic deer hunter. I'm happy to be clinging to my guns and my religion," said Ryan, who walked on stage swinging a black-and-gold Pittsburgh Steelers Terrible Towel, a nod to the popular hometown football team.

Democrats have tried to use Ryan's budget proposal to undermine Romney's pitch to blue-collar voters, and Obama's appeal on higher education was no different.

Democrats contend that Ryan's budget proposal, which failed to pass the Democratic-controlled Senate, would cut $115 billion from the Education Department, costing 1 million college students their Pell Grants over the next decade. Democrats argue those moves would punish many middle class and low income families trying to gain an education.

Those estimates, however, assume the cuts in Ryan's budget are applied evenly across all programs starting in 2014 ? something Ryan aides say would not happen. His budget does not directly address Pell Grant funding, and his aides say the cuts would not take a one-size-fits-all approach.

Ryan, who prefers that students take loans instead of receiving grants, would keep the top Pell Grant award in the coming school year at $5,500 but in future years reduce the number of students eligible, not the award sums. In other words, fewer students would receive them but the neediest would not see their awards changed.

More than 9.7 million students are expected to get grants for the academic year that is about to begin.

Following a lunchtime stop at Sloopy's, a diner at nearby Ohio State University, Obama made a personal pitch to college students at nearby Capital University, recalling that he and first lady Michelle Obama had to dig out of a "mountain of debt" after finishing law school.

He pointed to Romney's remarks on higher education at a Youngstown, Ohio, town hall meeting in March, when the GOP candidate suggested that college students would do better to "shop around" for tuition rates and college loans or borrow money from parents.

"He doesn't think investing in your future is worth it," Obama said. The president was campaigning later in the day at a community college in Reno, Nev., another important state to his re-election map.

Obama's pitch is aimed squarely at young voters who overwhelmingly favored him in 2008, along with their parents. The president continues to enjoy a sizable lead in polls among young voters, but not as wide as four years ago. Their parents are less convinced, and they are as much Obama's audience as their children.

In Minneapolis, Vice President Joe Biden also tried to portray Romney as unsympathetic to the concerns of many middle-income Americans, reprising the campaign's request that Romney release more extensive tax returns.

"I've never run across a presidential candidate who is a decent guy but is more out of touch than Mr. Romney right now," Biden said. Citing the Obama administration's efforts to reform Wall Street, Biden said the objections of Republican critics sounded like "squealing pigs" and called the changes "some of the toughest Wall Street regulations in history."

__

Elliott reported from Carnegie, Pa. Associated Press writers Julie Pace in Houston, Matthew Daly in Minneapolis and Kasie Hunt and Ken Thomas in Washington contributed to this report.

Associated Press

Source: http://hosted2.ap.org/APDEFAULT/3d281c11a96b4ad082fe88aa0db04305/Article_2012-08-21-Presidential%20Campaign/id-a925f6d82f5b46d8bda5def28b05486c

michael dyer bachmann bachmann iowa caucus results sickle cell trait michigan football michigan football

Wednesday, August 22, 2012

All About an iPhone Apps Review | Work Begone Workplace ...

From phones to mp3 players, the world of information technology today is dependent on one letter, an ?i?. In our modern day and age, people have become more dependent on technology. We have experienced a time wherein cameras, telephones, planners, and computers were completely separate from one another.

When it comes to the progression of technological marvels these days, things are happening in speeds that no one foresaw. With the Internet, cyberspace took over the ?airwaves? and things got even faster since. What not many people saw, however, was technology taking a detour from computers to the telephone; only the people at Apple saw that coming.

Since the Internet made use of telephone lines to connect to cyberspace, computer and the telephone got hooked together and there?s no separating them now. When it comes to this particular duo, it was responsible for the dawn of the smartphones. The thing about smartphones is that these days, most people have them and they have been deemed as smart because the phones can do other things apart from making phone calls.

When it comes to such a term, this is probably the best available definition. With a smartphone, you get to enjoy a gadget that can handle more complicated applications while running on a?mobile computing?platform that is evident on more basic mobile phones. In other words, the iPhone is a mobile computer that?s pretending to be a telephone because one of its functions is to make a phone call.

These days, such a concept has become ordinary. Users aren?t that amazed anymore about what the iPhone can do and so they keep on adding apps after apps after apps. There are several iPhone apps review and download sites as there are hundreds and thousands of apps available online.

The potential is endless and an iPhone user is limited only by his or her own choice. There are apps for everyone based on one?s age, sex, lifestyle, personality, hobbies, preferences, likes, obligations, priorities, and so on. Most of the time, people download applications even if they do not need it.

Today, a lot of downloaded apps belong to categories such as social network, lifestyle, and games. MyCalendar Mobile, Pitfall, and AppZilla 3 are some of the most popular apps according to the iPhone?s website. Aside from these, Extreme Fishing 2 not to mention The Heist are also highly popular game applications.

With so many apps to choose from, the smartphone has become even more than what it set out to be at the onset. You had a camera, navigator, mp3 player, and phone with the early smartphones. Today, these also function as a videogame console, TV, computer, radio, book reader, and much more; it?s practically every gadget there is merged into one.

These days, the most popular apps are gaming ones including titles such as Rage of Bahamut, Dragon Vale, and Poker by Zynga. The kinds of apps that are extremely popular show you the age group that favors the iPhone. The technology is being enjoyed more by its youngest users or at least those who love to play the most.

As more apps are developed, a lot of positive things can be expected from the iPhone. Sooner than later, new categories may be formed as well. See to it that you check out reviews for iPhone news apps and the like. Since there are a lot of applications available for iPhones , it becomes important to check out the reviews for these applications. You can learn more from us for latest reviews and updates.

Source: http://www.workbegone.com/264-all-about-an-iphone-apps-review

ground hogs day 2012 goundhog day punxsutawney facebook ipo facebook ipo egypt soccer riot right to work

Deadline passes without word from Senate hopeful Akin

WASHINGTON (Reuters) - A deadline passed on Tuesday evening with no indication from Republican U.S. Representative Todd Akin that he would bow to party pressure and quit the Missouri Senate race over his controversial remarks on abortion and rape.

Missouri election law gave Akin until 5 p.m. local time (6 p.m. EDT) to take himself off the November 6 ballot in the Senate race against Democrat Claire McCaskill.

Party leaders including Republican presidential hopeful Mitt Romney and Senate Republican leader Mitch McConnell had strongly urged him to step down.

But the Republican has vowed to stay in the contest, saying he represents a conservative movement that must be heard.

A staunch opponent of abortion rights, Akin claimed in a television interview on Sunday that women could not get pregnant from "legitimate rape" when asked about his opposition to abortion even in cases of rape and incest.

(Reporting by Patricia Zengerle; Editing by Alistair Bell)

Source: http://news.yahoo.com/deadline-passes-without-word-senate-hopeful-akin-221303301.html

London 2012 Fencing olympics chariots of fire nbc Medal Count Sam Mikulak London 2012 diving

RadioWatch: Harris Broadcast Communications: New radio ...

Harris Broadcast Communications comes to IBC2012 (7 ? 11 September, Amsterdam RAI) with an array of new analogue and digital radio transmission products ideal for international broadcasters operating large transmission networks and seeking to reduce network costs and complexity in the process.

Four new low-power Flexiva transmitter models (50, 150, 300 and 500 W) will be unveiled at IBC, extending Harris? range to accommodate analogue and digital transmission network requirements. This is ideal for international broadcasters deploying multiple low-power FM transmitters across a region or country. The low-power models join a growing range that also includes several medium- and high-power options that span to from 1 to 40kW.

Harris will also introduce its range of Platinum VAX Compact Class transmitters, built upon the company?s PowerSmart architecture to minimise footprint and power costs. Available in 50, 300 and 600 W models, the Platinum VAX Compact Class offers half the footprint of its predecessor at 2RU for the highest possible power density and operational efficiency. Its integrated Harris Apex M2X exciter enables simple modulation changes to support Mobile TV transmission for analogue and digital broadcast standards, including DVB-T, DVB-T2 and T-DMB.

The company will also demonstrate a new electronic data interchange (EDI) solution to support IP-based distribution of radio broadcast content over multipoint DAB transmission networks. This development enables low-cost, targeted content delivery to many transmitters across large geographic regions. An EDI module distributes content from the central headend to multiple transmitters, each with a receiving EDI module built into its Apex M2X exciter. This creates the industry?s only integrated EDI interface on the market for DAB transmitters, eliminating expensive external components.

Source: http://sw-radio.blogspot.com/2012/08/harris-broadcast-communications-new.html

its a wonderful life rex ryan yule log ham recipes darlene love free kindle books roasted potatoes

Passion vs. Friendship Star&#39;s Journal of Random Thoughts

Backstory for this entry: Something different, in which my husband says the following:

And yes, before you say anything one of the best friends is my wife. I?m not trying to make the relationship seem less than it is, rather I?m pointing out what I feel is the most important aspect of my relationship with my wife, i.e. that she is my best friend. Yes, yes, I know there are those out there that cry out that a relationship has to have Passion! ? Bluntly put, I would rather have a relationship built 99% on friendship than passion.

I posted what was basically a ?me too? comment, and I?ll admit I mostly did so because I was worried people would look at what he?d said and wonder what I?d think of it. So I told them. I wanted to say more, to expand on the idea, but was having trouble condensing it all into comment form. Eventually I decided I?d better just do my own blog about it.

Why do I think people would raise their eyebrows at the above quote? Because there seems to be this expectation that two people in a romantic relationship will be passionate about it. Strongly passionate. All the time. To some extent, that?s the result of my own overexposure to pop culture, which I realize does not necessarily reflect what most people think in reality, but that?s not all of it. I?m seeing an increasing number of ?inspirational quotes? being posted on Facebook and etc. talking about how passion is an absolute requirement for and the foundation of a good romance, for example. My husband also sometimes tells me about people quietly hinting to him that he shouldn?t spend so much time with his other best friend, who is also female, because it might allegedly jeapordize his marriage. (These concerns are, interestingly, never voiced to me.) The implication is that if he chooses to see a movie or have dinner or go on a trip with another woman, he is insufficiently passionate about his relationship with me ? and also that if I am as passionate about our relationship as I am expected to be, I will find this behaviour upsetting. These are real thoughts being expressed and endorsed by people I know, not just dialog written for dramatic effect onscreen. It?s a bit bewildering to be in a relationship I know is very strong and yet have this pressure coming in from outside to tell us that what we?re defining as ?strength? isn?t. It can?t be. It?s not passionate enough.

Look. Passion is a wonderful thing, certainly. But to me, it?s like cinnamon. It?s delicious and lovely and I know lots of people think there?s no such thing as too much, but? Can you imagine trying to make a healthy, sustaining meal using cinnamon as the primary ingredient? It?s better suited to providing a flavor that brings everything together. Bread made using cinnamon instead of, say, flour would taste horrendous, if we?re all honest. It would be inedible. Bread made the usual way with a cinnamon swirl? Delicious. So it is with passion and a lasting, stable, strong romantic relationship. Sure, a bit of it makes the whole thing more delicious, but it?s possible to overdo it.

It?s important to have passion, I think, but in a long-term relationship it?s equally important to understand that passion is not a constant. I don?t mean ?well, you have to work at it to sustain it, it?s not just automatically there?, although that?s certainly true as well. I mean that it has its seasons and phases, its ups and downs, times when it?s strong and times when it may seem nonexistant. If your relationship is built entirely on passion, what happens when you hit one of those low periods? There?s nothing left. You see everything fading before your eyes, and you think, Well, the fire is gone. It?s over. That?s one very good reason why being best friends is the bedrock of our marriage. When we feel in a bit of a slump romantically, we still have this meaningful connection to fall back upon. It will sustain us far longer and endure far more than pure passion ever could.

There?s also just the pure, pragmatic reality of the situation. Passion takes a lot of energy to maintain. It?s an intense emotional state, and that can be very draining. We?ve both got a lot of other things to think about: work, parenting, housekeeping, cooking, the budget, our own individual interests, grocery shopping, various health concerns ? all kinds of stuff that require energy too. Good, solid friendship becomes the everyday life of our relationship because we can do that even when we?re too exhausted or too busy or too focused on something else to be consumed by passion.

It?s worth noting, too, that anything as intense as passion stands a fair chance of blowing up in your face. I think that the short distance separating one intense emotional state from another often gets glossed over. Passion is capable of turning from love to rage in relatively short order. It?s the risk you run ? and to what do you turn in order to find common ground from which to get back on your feet and continue? Friendship.

I?ve been with Tim a long time now. I believe that we can survive almost anything together, to the point that I can?t think what we couldn?t. I don?t believe that because we?re both passionate about our relationship. I believe it because I believe that the friendship we have built together will hold even when passion and romance inevitably suffer temporary setbacks and failures. I believe it because I?ve seen it happen. If it makes for a subtle, low-key relationship that doesn?t look romantic enough or passionate enough to suit other people?s tastes? That?s their problem. We?re happy with basing our lives together on friendship and turning to passion whenever it happens along.

Source: http://star.qnarf.com/?p=3400

miracle on 34th street santa tracker monkey bread letter from santa sweet potato pie sweet potato pie twas the night before christmas