Content from CNET tagged with

attacker ^[x] , flaw ^[x] , Microsoft Windows ^[x]

Show Results by: News (45)

Narrow Your Results: security (42); Microsoft Corp. (38); vulnerability (33); PC (18); Microsoft Windows XP (17); operating system (15); server (12); patch management (11); Symantec Corp. (11); Microsoft Internet Explorer (11); Web browser (9); attack (9); researcher (9); service pack (9); Stephen Toulouse (8)

1 | 2 | 3 Next

News Stories

Showing 1-20 of 45 results found

Windows flaw could spawn DoS attacks

July 15, 2005 Microsoft is working on a patch for a flaw that could allow attackers to remotely crash Windows PCs. TAGS: attacker, iDefense, flaw, denial of service, patch, Windows PC, vulnerability, security, Microsoft Corp., Microsoft Windows, Microsoft Windows XP, PC

Flaws found in RealNetworks media player

December 2, 2005 Two RealPlayer flaws could let attackers commandeer Windows PCs running the software, eEye Digital warns. TAGS: eEye Digital Security, RealNetworks Inc., flaw, RealNetworks RealPlayer, media player, attacker, researcher, Apple Computer, Microsoft Windows

Attackers exploit zero-day Windows flaw

March 30, 2007 Attackers take advantage of vulnerability in Windows animated cursor. Also: Trojan spam dupes users into thinking it's an IE 7 beta. TAGS: SANS Institute, advisory, cursor, Microsoft Internet Explorer 7, trojan horse, attacker, flaw, Microsoft Internet Explorer, Microsoft Corp., Microsoft Windows

Skype flaws open computers to attack

October 25, 2005 Company updates its Internet telephony application to fix bugs that could allow an attacker to gain control of a user's PC. TAGS: Skype, flaw, eBay Inc., attacker, Apple Mac OS X, bug, Apple Mac OS, Pocket PC, Linux, security, Apple Macintosh, Microsoft Windows, PC

Windows zero-day flaw gets a fix

April 10, 2007 Microsoft's Tuesday patches include a fix for a "critical" Windows flaw that was first disclosed in December and also affects Vista. TAGS: flaw, vulnerability, agent, patch management, fix, client-server, attacker, security, Microsoft Windows Vista, Microsoft Corp., Microsoft Windows, Microsoft Windows XP

F-Secure issues patch for critical flaws

January 19, 2006 Its focus is on flaws in the way F-Secure products handle data compression archives. TAGS: F-Secure Corp., data compression, antivirus, flaw, attacker, RAR, vulnerability, malicious software, security, Linux, Microsoft Windows, Microsoft Corp.

Apple iTunes security flaw discovered

November 18, 2005 A vulnerability in software that helps manage iTunes could allow an attacker to launch arbitrary code. TAGS: eEye Digital Security, Apple iTunes, security flaw, flaw, Apple Computer, attacker, security, operating system, Apple Macintosh, Microsoft Windows

Security hole found in Mozilla browser

July 9, 2004 A security flaw could theoretically allow attackers to crash computers or launch unauthorized programs. TAGS: Mozilla Corp., Mozilla Web browser, security flaw, attacker, Microsoft Internet Explorer, Web browser, flaw, security, Firefox, Microsoft Windows XP, operating system, developer, Microsoft Windows, Microsoft Corp.

Microsoft warns of three flaws

January 14, 2004 The software giant releases patches for the bugs, the most serious of which could give attackers a back door into the company's security server product. TAGS: Microsoft Acceleration Server, H.323, flaw, Stephen Toulouse, attacker, Internet security, patch management, vulnerability, Microsoft SQL Server, VoIP, Microsoft Corp., server, security, Microsoft Windows

Windows flaw reaches beyond XP

July 18, 2005 Problem that could let an attacker crash a PC exists in several versions of the OS, Microsoft says. TAGS: remote desktop, advisory, terminal services, Microsoft Windows XP, Microsoft Windows XP Media Center, attacker, Microsoft Windows Server 2003, flaw, Microsoft Windows Server, Microsoft Windows 2000, Microsoft Windows, Microsoft Corp., security, operating system, PC

Microsoft patches a pair of flaws

June 8, 2004 The software giant releases fixes for a vulnerability in its DirectPlay peer-to-peer gaming module and a flaw in a third-party program Microsoft includes with several applications. TAGS: Crystal Reports, Stephen Toulouse, flaw, Sasser worm, patch management, attacker, P2P, vulnerability, RSS, security, Microsoft Corp., games, Microsoft Windows XP, operating system, Microsoft Windows

MSN Messenger flaw allows hard-drive access

March 9, 2004 Microsoft reveals three vulnerabilities in its software, including the first to affect MSN Messenger 6.0. Attackers could also exploit chinks in Outlook and Windows Media Services. TAGS: Stephen Toulouse, MSN Messenger, attacker, vulnerability, MSN, victim, caller, Windows Media, Microsoft Outlook, flaw, risk, Symantec Corp., hard drive, security, Microsoft Corp., server

Windows, Exchange flaws patched

May 9, 2006 Trio of security updates includes two for critical flaws in Exchange e-mail server and third-party software in Windows. TAGS: Microsoft Exchange Server, flaw, Macromedia Flash Player, service pack, vulnerability, attacker, Microsoft Windows 98, Microsoft Windows XP Home Edition, e-mail server, Symantec Corp., Microsoft Corp., Adobe Systems Inc., server, security, Microsoft Windows, Microsoft Windows XP

Drag-and-drop flaw mars Microsoft's latest update

August 20, 2004 Independent researcher finds an Internet Explorer vulnerability that could turn drag-and-drop into drag-and-infect. TAGS: Service Pack 2, flaw, researcher, attacker, security, patch, service pack, vulnerability, Microsoft Windows XP, Microsoft Internet Explorer, Microsoft Corp., Microsoft Windows

Attack code targets new IE hole

September 15, 2006 Code that exploits a serious, yet-to-be-patched hole in Microsoft's Web browser has been posted on the Net. TAGS: Microsoft Internet Explorer, attacker, flaw, Windows PC, attack, Microsoft Corp., Microsoft Windows, Web browser, PC

Flaw could unleash another Slammer

December 10, 2003 A security firm finds that a recently patched Windows vulnerability could still be used to create a fast-moving worm similar to SQL Slammer. TAGS: SQL Slammer, UDP, Core Security Technologies, packet, worm, SQL, flaw, attacker, vulnerability, attack, patch, Microsoft Corp., security, Microsoft Windows

Fixes in for Windows, Microsoft e-mail flaws

January 10, 2006 Two "critical" security bugs in Windows, Outlook and Exchange could allow an attacker to hijack vulnerable PCs, company says. TAGS: Microsoft Outlook, attacker, flaw, vulnerability, service pack, e-mail, Microsoft Corp., security, font, Microsoft Windows, operating system, server, PC

IE flaw opens door to infection on sight

August 9, 2005 Microsoft plugs six holes, including an IE bug that could expose a PC user to attack just for looking at a picture. TAGS: bulletin, authentication protocol, Kerberos, attacker, Microsoft Windows Server 2003, Microsoft Internet Explorer, remote desktop, flaw, Microsoft Windows 2000, Microsoft Windows Server, vulnerability, Service Pack 2, service pack, attack, Symantec Corp., security

Fixes in for critical IE, Windows flaws

June 14, 2005 Three of the 10 bulletins in Microsoft's monthly batch of patches deal with three holes that could let intruders take over a PC. TAGS: server message block, vulnerability, intruder, flaw, patch management, attacker, Microsoft Windows 2000, Microsoft Internet Explorer, PNG, Microsoft Windows, server, Microsoft Windows XP, Microsoft Corp., security, HTML, PC

Microsoft leaves Word zero-day holes unpatched

January 9, 2007 Software giant releases fixes for vulnerabilities in Windows and Office, but several known Word zero-day flaws go without patches. TAGS: vulnerability, bulletin, patch management, Microsoft Update, fix, attacker, Automatic Update, Microsoft Office, Microsoft Word, flaw, Microsoft Corp., Microsoft Internet Explorer, security, Microsoft Windows, PC