All versions of Windows ship with an ActiveX control known as the Certificate Enrollment Control, the purpose of which is to allow Web-based certificate enrollments. The control contains a flaw that could enable a Web page, through an extremely complex process, to invoke the control in a way that would delete certificates on a user?s system. An attacker who successfully exploited the vulnerability could corrupt trusted root certificates, EFS encryption certificates, e-mail signing certificates, and any other certificates on the system, thereby preventing the user from using these features.
A new version of the control is available that corrects the vulnerability and can be installed via the patch. As discussed in the Caveats section, customers who operate Web sites that use the Certificate Enrollment Control will need to make minor revisions to their Web applications in order to use the new control. Microsoft Knowledge Base article Q323172 details how to do this. In addition, the patch addresses a similar, but less serious vulnerability discovered in the SmartCard Enrollment control. This control ships with Windows 2000 and Windows XP. A new version of this control is also provided.
Like it? Share with your friends!
Other Windows Software of Developer «Microsoft»:
Microsoft Windows Defender Windows Defender is software that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software by detecting and removing known spyware from your computer. Windows Defender features Real-T
Visual FoxPro 6.0 Modeling Wizards Visual FoxPro 6.0 Modeling Wizards contains updated versions of the Visual FoxPro Modeling Connection Wizards. Visual modeling makes it possible for developers to manage the complexity of component-based development with an architecture-driven approach.Wit
SharePoint Portal Server 2003 Sample: Back Up and Restore Use these programmatic steps to help you write an application to perform a disaster recovery of a Microsoft Office SharePoint Portal Server 2003 farm. The SPSBackupSample in this download (SPSBackupSample.exe) includes programmatic steps and code to demons
Gigabyte GA-F2A75M-D3H (rev. 1.0) Microsoft UAA Driver APU: - FM2 Socket - AMD A series processors - AMD Athlon series processorsChipset: - AMD A75Memory: - 4 x 1.5V DDR3 DIMM sockets supporting up to 64 GB of system memory - Dual channel memory architecture - Support for DDR3 2400(OC)/1866/1600/1333/1066 MHz
Microsoft SharePoint Designer 2010 (64-bit) Microsoft SharePoint Designer 2010 (64-bit) is the tool of choice for the rapid development of SharePoint applications. Advanced users can compose no-code solutions that encompass a variety of common scenarios, from collaborative sites and web publishing t
Microsoft Dynamics CRM 2011 E-mail Router (64-bit) Microsoft Dynamics CRM 2011 E-mail Router (64-bit) is an interface between the Microsoft Dynamics CRM system and one or more Exchange servers or POP3 servers for incoming e-mail, and one or more SMTP or Exchange servers for outgoing e-mail. E-mail messages
Microsoft Tic Tac Toe How about a game of tick tack toe? Put a twist on this classic game as you play against the computer. Just use your tablet pen to write your selection instead of typing it.Requirements:Windows XP Tablet PC
Microsoft SharePoint 2010 Administration Toolkit The Microsoft SharePoint Administration Toolkit contains Security Configuration Wizard (SCW) manifests, which add roles for SharePoint 2010 Products to Windows Server 2008 with Service Pack 2 or to Windows Server 2008 R2, Load Testing Toolkit (LTK), which
MSXML 4.0 Service Pack 2 (Microsoft XML Core Services) MSXML 4.0 Service Pack 2 (SP2) is a complete replacement of MSXML 4.0 and MSXML 4.0 Service Pack 1 (SP1). MSXML 4.0 SP2 provides a number of security and bug fixes. MSXML 4.0 SP2 does not replace MSXML 3.0 because some obsolete and non-conformant features
Active System Locker System Locker is a handy utility that locks your keyboard and mouse, allowing you to protect your personal computer from unauthorized access. System Locker protects your system when you are away; has powerful start-up options; has taskbar notification; and
FileMSB FileMSB is an encryption software on the windows platform, it can manage the password, (bulk) to encrypt / decrypt files, create self-extracting file, crushed paper, is a good helper for your office.
FUNCTIONS:Password management, encryption, decryption,
Remora USB Disk Guard Pro Remora USB Disk Guard Pro is a project based file encryption/compression tool, or a strong file encryption/compression switch, which can start up from your USB storage devices. With Remora USB Disk Guard Pro, you can secure all your files anytime and anywh
CodeMixer-Red CodeMixer is an easy to use software for encoding personal documents that you want keep safe from your colleagues, wife or children.
CodeMixer is a collection of stand alone programs like CodeMixer-Red, CodeMixer-Blue. Each CodeMixer program can be used f
IDVAS Desktop IDVAS help you secure information exchange, providing inexpensive and useful information protection scheme for small and medium-sized enterprises and individuals. Based on this, users can not only protect sensitive information, but also authorize document
Password Recovery for Corel Paradox Password Recovery for Corel Paradox is a toolkit for Corel Paradox databases from 3.0, 3.5, 4.x, 5.x, 7.x to 11.x. It can help you to retrieve forgotten database password from Paradox table files (*.db; *.px; *.xnn; *.xgn; *.ygn). This program should work
StripMyRights Utility for Windows XP and Windows Server 2003 that runs applications with reduced rights. If you for instance are logged on as Administrator or another user with administrative privileges on your Windows computer, you can use StripMyRights to run for inst
USB Flash Security## Group Edition USB Flash Security is a security tool for mobile devices. It can help you to protect your mobile devices. It features protect data in USB flash memory by a password, format (FAT and FAT32), safely remove software which installed in protected area, limit of
Dropbox Encrypter Decrypter Dropbox Encrypter Decrypter is a very lightweight application that was especially designed to help you secure the contents of your Dropbox directory by encoding it. If you wish to remove the extra security layer, Dropbox Encrypter Decrypter allows you to d
WinHasher WinHasher is an easy-to-use, small stand-alone program that verifies a file has not been altered or tampered with since being signed by the author or publisher. Supported hash functions include CRC32, GOST, MD5, RIPEMD family, SHA family (SHA1), Tiger, and
Supported Operating Systems:
Windows XP |
Comments on Windows Certificate Enrollment Control Vulnerability Patch (Windows XP):
Comments not found
Windows Software - Free Windows Downloads, Apps, Games, Freeware, Skype, Media Player, Antivirus, Gimp, Live, Starter for Windows XP, Vista, 7, 8, 10