#mhtml

[lowkeyrpc-blog]

Lowkeyrpc Theme One: Oh Lord

Original theme by @musecentral

Ignore the icon upload buttons every time i tried to remove them the theme like glitched out of the universe but yeah here ya go. sizes are on the preview. none of this would be possible without my homie chey.

LP ( x ) Code ( x )

[lifeinbitsvg]

G DATA nos alerta del troyano DRIDEX que se propaga por medio de un documento word

G DATA nos alerta del troyano DRIDEX que se propaga por medio de un documento word

Una campaña de spam ha estado distribuyendo el troyano Dridex en un archivo adjunto de Microsoft Word que simulaba ser una factura, según las investigaciones de G DATA SecurityLabs. La realidad es que la extensión .doc del mencionado adjunto solo pretendía confundir a las víctimas pues en realidad camuflaba un documento MHTML, un formato web soportado por Microsoft Word. El archivo, que pretende…

View On WordPress

[solutionssquad]

How to save a website as MHTML in Chrome [Tip]

http://www.solutionssquad.com/blog/how-to-save-a-website-as-mhtml-in-chrome-tip/

How to save a website as MHTML in Chrome [Tip]

#Chrome, #MHTML, #Save, #Website #Uncategorized

[supportnet-blog]

Есть дополнение к Firefox – UnMHT, которое безрезультатно искал ранее. Теперь в моем Firefox есть поддержка формата MHT.

Далее...

[privacyandsecurity]

Heads up: Microsoft's "Patch Tuesday" is just around the corner and it's a doozy:

Microsoft is planning a huge Patch Tuesday for April , alerting customers that the company will issue 17 bulletins next week to fix a total of 64 vulnerabilities. Nine of the bulletins have a maximum severity rating of critical.

The bulletins will cover a range of Microsoft products, including several versions of Windows and Internet Explorer and Microsoft Office. One of the bugs that Microsoft will fix on April 12 is the SMB vulnerability that has been publicly known since the middle of February.

It should also be noted that Microsoft will finally be deploying a fix for the MTHML vulnerability that was absent from last month's Patch Tuesday.

Be on the lookout for this one. 

[tsupo]

Microsoftは、1月に公開したセキュリティアドバイザリを米国時間3月11日に更新し、実際の攻撃が発生していることを確認したと述べている → マイクロソフト サポート技術情報 2501696

「Windows」のMHTMLの脆弱性、ハッカーの標的に--マイクロソフトが警告 - CNET Japan

[privacyandsecurity]

Microsoft recently issued the monthly security bulletins for March, but absent from it was a fix for the MHTML vulnerability.  

In its March Patch release, the company said that it was “monitoring the threat landscape” and “working to provide a solution through our monthly security update release process,” suggesting that the company would not do an out-of-cycle security patch to plug the MHTML hole once a fix is available.

Sure enough, the threat landscape has shown signs of this vulnerability being exploited in the wild, as reported by Google:

We’ve noticed some highly targeted and apparently politically motivated attacks against our users. We believe activists may have been a specific target. We’ve also seen attacks against users of another popular social site. All these attacks abuse a publicly-disclosed MHTML vulnerability for which an exploit was publicly posted in January 2011. Users browsing with the Internet Explorer browser are affected.

While this vulnerability remains unpatched, there is a FixIt tool available which should be applied until further notification of a patch from Microsoft.

[tsupo]

CVE-2011-0096 / 特定の状況で攻撃者が標的となるユーザーの「Internet Explorer」のコンテキストで実行されているウェブリクエストの応答にクライアント側のスクリプトを挿入される可能性

「Windows」のMHTMLに脆弱性--悪意のあるスクリプトを実行される - CNET Japan