All versions of Windows ship with an ActiveX control known as the Certificate Enrollment Control, the purpose of which is to allow Web-based certificate enrollments. The control contains a flaw that could enable a Web page, through an extremely complex process, to invoke the control in a way that would delete certificates on a user?s system. An attacker who successfully exploited the vulnerability could corrupt trusted root certificates, EFS encryption certificates, e-mail signing certificates, and any other certificates on the system, thereby preventing the user from using these features.
A new version of the control is available that corrects the vulnerability and can be installed via the patch. As discussed in the Caveats section, customers who operate Web sites that use the Certificate Enrollment Control will need to make minor revisions to their Web applications in order to use the new control. Microsoft Knowledge Base article Q323172 details how to do this. In addition, the patch addresses a similar, but less serious vulnerability discovered in the SmartCard Enrollment control. This control ships with Windows 2000 and Windows XP. A new version of this control is also provided.
Like it? Share with your friends!
Other Windows Software of Developer «Microsoft»:
Gigabyte GA-F2A55M-DS2 (rev. 3.0) Realtek Audio Driver Key Features: - Socket FM2+ supports AMD FM2+/FM2 A-series APU - GIGABYTE Ultra Durable 4 Plus Technology - GIGABYTE UEFI DualBIOS - GIGABYTE On/Off Charge for USB devices - Features Dual-link DVI for high resolution displays of up to 2560 x 1600 pixels -
Hotfix Rollup for 2007 Microsoft Office System (KB935520) Microsoft has released an update for the spelling checker in 2007 Microsoft Office programs. This release is an update to the English-language dictionary. This version is the first release on CNET Download.com.What is new in this release:This version is th
Mobile Sales - Device Sample The Mobile Sales Device component demonstrates how easy it is to create a mobile data entry application. This version is the first release on CNET Download.com.What is new in this release:This version is the first release on CNET Download.com.Requirements
Microsoft Windows Imaging Component (32-bit) Microsoft Windows Imaging Component (32-bit) supports discovery of new and proprietary image formats. Any application that uses WIC can take advantage of new image formats as soon as their CODECs (encoder/decoders) are installed on the computer. WIC includ
Microsoft Exchange Server Mailbox Merge Wizard (ExMerge) Use the Mailbox Merge Program to extract data from mailboxes on a Microsoft Exchange Server and then merge this data into mailboxes on another Microsoft Exchange Server. The program copies data from the source server into Personal Folders (.PST files) and
Windows Vista Service Pack 1 Five Language Standalone Windows Vista Service Pack 1 (SP1) is an update to Windows Vista that addresses feedback from our customers. In addition to previously released updates, SP1 will contain changes focused on addressing specific reliability, performance, and compatibility iss
Microsoft Security Bulletin MS02-039 SQL Server 2000 introduces the ability to host multiple instances of SQL Server on a single physical machine. Each instance operates for all intents and purposes as though it was a separate server. However, the multiple instances cannot all use the standar
Microsoft Windows 7 Ultimate Microsoft Windows 7 Ultimate is designed for people who want it all. It gives you everything Home Premium and Professional offers, plus added security features and the flexibility to work in multiple languages. Create a home network and share all of your f
SecExMail Secure Email Encryption This e-mail encryption software uses RSA public key encryption and Twofish block cipher; SecExMail features PGP style e-mail keys, but without the dependence on e-mail-software-specific plug-ins. The software runs unobtrusively as a relay agent in the syst
dirLock dirLock is a simple but easy to use program that lets users lock/unlock any folder on a NTFS volume. DirLock is designed for users who keep their computer turned on/logged in for others to use it. So using this app you'd be able to lock individual folders
Ciphire Mail Ciphire Mail is an e-mail encryption tool. It works in conjunction with your existing email client. Ciphire Mail operates seamlessly in the background and does not interfere with normal emailing routines. It encrypts and decrypts email messages, and can di
GOLock Folder GOLock Folder is a security software that can encrypt and provide a folder with a password. It is simple and easy to use and advisable to use home computers.
SFV Ninja SFV Ninja is a checksum calculator which can create and compare checksums. It supports MD5, SHA-1 and SHA-256 formats. It has two verification modes. The first will verify all files in the list like any typical SFV application. The second mode will only ve
SecureCrypt Ultimate Edition With guaranteed protection using up to date encryption and decryption
technologies and a newly constructed user interaction system, SecureCrypt will offer you the safest, easiest and the best encryption alternative completely free of charge.
Enigma Encryption This encryption software enables you to encrypt passwords, images, video, audio, and documents so they can only be viewed by you--not by your spouse, boss, or anyone else except those you give permission to.Requirements:Windows 95/98/Me/NT/2000/XPLimitatio
Complete Protection System - File Protection The Complete Protection System (CPS) is designed to protect files and folders, while making them portable giving you peace of mind that even if the files are lost they won't be read. But why? Well there are many reasons such as high profile loss of data wi
Windows Login Recovery Standard Windows Login Recovery Standard is Windows password recovery software enables you to reset local administrator and user passwords. Instantly gain access to your system if you forgot Windows administrator password or user password and are locked out of comp
Encrypt Easy Encrypt Easy is a highly secure file encryption program enabling fast and simple one-click encryption and decryption of single files, folders and entire directory trees. The program uses the best and most proven cryptographic algorithms such as 448-bit Blo
Supported Operating Systems:
Windows XP |
Comments on :
Comments not found
Windows Software - Free Windows Downloads, Apps, Games, Freeware, Skype, Media Player, Antivirus, Gimp, Live, Starter for Windows XP, Vista, 7, 8, 10