Tuesday, October 03, 2006

Exploitation of unpatched Microsoft Internet Explorer Vector Markup Language Code Execution Vulnerability

It has been observed that the unpatched Microsoft Internet Explorer Vector Markup Language Code Execution Vulnerability


Various Antivirus vendors has alerted about the Trojans and exploits;

and recognizing these as Trojan.Vimalov [ Symantec ] , EXPL_EXE

COD.A (Trend Micro) , HTML/Levem.C (Microsoft), Exploit-VMLFill [McAfee] , Troj/Dloadr-ANO, Troj/Goldun-EC, Troj/Goldun-EE [ Sophos].


Users are advised to take following precautions until a patch is available to address this vulnerability




  • Un-register Vgx.dll on Windows XP Service Pack 1; Windows XP Service Pack 2; Windows Server 2003 and Windows Server 2003 Service Pack 1

  • Modify the Access Control List on Vgx.dll to be more restrictive

  • Configure Internet Explorer 6 for Microsoft Windows XP Service Pack 2 to disable Binary and Script Behaviors in the Internet and Local Intranet security zone.

  • Read e-mail messages in plain text format to help protect yourself from the HTML e-mail attack vector


Microsoft has released patches on 26th Sep 2006 to address this secuirty issue vide Security Bulletin MS06-055. Users are advised to apply appropriate patches as mentioned in this bulletin.


References:
http://www.microsoft.com/

http://vil.nai.com/

http://www.symantec.com/

http://www.sophos.com/

http://www.isc.sans.org/

Changing Title of Yahoo Messenger

Changing Yahoo Messenger Title Bar

You can change the text that appears at the very top of the yahoo messenger window by editing the ymsgr.ini file which is usually located in the messenger folder. Find the ymsgr.ini file and open it. Then at the end, type this :

[APP TITLE]
caption=YOUR TEXT

Changing YOUR TEXT to whatever you want it to say. Then save the file and close messenger. When you restart messenger you will see your new message.

Note Arrow It's very easy 2 find ymsgr.ini file through search & it is Usually located on da Drive Where Messenger is Installed.