Vista SP1 TCP/IP Buffer Overflow Vulnerability Overwrites Kernel Memory

At the end of October 2008 Microsoft was informed of a new vulnerability affecting the core of Windows Vista, but a fix was not delivered along with the November security bulletins. Thomas Unterleitner, from phion AG, informed that the Microsoft VISTA TCP/IP stack buffer overflow security flaw affected both 32-bit and 64-bit versions of the operating system. The vulnerability was confirmed on the Enterprise and Ultimate SKUs of the OS by Unterleitner, who indicated that it was likely for all Vista editions to be affected. According to Unterleitner, Windows XP was not corrupted.

“Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory,” Unterleitner revealed. The result of exploits targeting the vulnerability could range from less severe denial-of-service attacks to code injections.

“The crash does not always occur instantly after executing the provided sample program; it may take a while until the corrupted memory is accessed, causing the operating system to crash with a blue screen,” Unterleitner explained.

Because of the flaw in Vista's network input/output subsystem malicious requests addressing iphlpapi.dll API would generate a blue-screen-of-death, causing the impacted machine to crash. However, since the vulnerability is at kernel level, the true danger lies in the exposure of Vista's code to rootkit infections. Still, the severity of the vulnerability is limited because of the security mitigations built into Windows Vista.

“Installation of Service Pack 1 and/or security updates had no effect in regards to resolve the random crashes. To execute either the sample program or the route-add command, the user has to be member of the Network Configuration Operators group or the Administrators group. Since this buffer overflow overwrites kernel memory, it could be possible that members of the Network Configuration Operator group exploit this and take control over the operating system without any restriction,” Unterleitner stated.

Zenni Optical was on FOX news!

Our eyes is one of the important parts in our body because when we don’t have eyes we can’t see the wonderful creation of God and it is very disadvantage to us because if your sight was lost there are lot of work you can’t do.

Eyeglasses is the one item who can protect our eyes and help us to see more when our sigh it blurry. Where to find wonderful eyeglasses? The best place for you is Variable Dimension Frames From Zenni because they have the Great Eyeglasses For Less and all of their eyeglasses has the best quality.

When I watched T.V. I saw Zenni Optical was on FOX news! Because they have incredible eyeglasses. As you visit to their site you can see different eyeglasses styles and colors you can choose if you want to buy Zenni eyeglasses.charitable

Best Web Hosting Services

At Web Hosting Pad, we are very confident in our products and services. We provide a fast, reliable and comprehensive service that we believe you will be completely satisfied with.

Webhostingpad was formed in 2005 with a team of very successful and proven industry veterans, intent on delivering the best value in web hosting. With the growing need of affordable hosting, the company set out to deliver the best web hosting at a price where everyone can afford to have their piece of the world wide web. Web Hosting Pad will remain committed to delivering the best value in Internet hosting by providing a safe, reliable and efficient process to create an Internet presence. All with a price structure driven by value.

Signup now to get this features with Unlimited disk Space

• Award winning customer service
• Quality brand name equipment
• 99.9% uptime guarantee
• State of the art Data Center
• 30 day money back guarantee
• Backup solution for your website
• NO Hidden Fees !!

Signup now to get unlimited disk space @ $4.95/month

This Day in History

Adding Desktop RAM

I have many experience when i went to buy a new computer for me. Actually its very difficult to buy a hardware computer product from a computer sales shop. We cant even believe them when we are purchasing it. When it comes for processor or harddisk we can believe it because all the products and well sealed. But when we come for RAM its difficult to believe because RAM's are not packed in a good way. Maximum all the products are not worthy. Then i started to find to purchase online and i found a place to purchase RAM's for my computer in a better manner. When i saw the video of online RAM buying i really felt good to buy this product.

Memory deal is the best place to buy the RAM and memory for your computer. If you planned to buy a new memory for your computer just try here or if you want to upgrade your computer memory RAM please start purchasing online using this website. Here they have all types of RAM like DIMM, DDR2, DDR PC2700 Memory etc. Adding Computer RAM is easy for you,Add IMAC Memory are best way to upgrade your PC.

Here is the best way to purchase online for your computer memory peripherals so dont wait start visiting the site and just watch the video for online purchasing you will know about their products and purchasing their products.

SocialsPark - the Another way to earn money by izea

After Payperpost IZEA introduce another way to earn money online through blogging. SocialSpark has many advantage it includes a social networking site too. Yes bloggers you can earn as well as you can also be with your friends through this service. I signed up in socialspark and even got good friends of bloggers to be with. Its a best way to be a blogger in socialspark.

Normally bloggers use a separate sites to earn money and to be in community networks but here is the best way. Even it includes commenting in sponsors about their payment so its good for bloggers to know about the reviews sponsored by advertisers. And you can also intimate or share the sponsors with your friends in socialspark and you can also view the latest post written for the sponsor. It easy for bloggers to know about writing reviews if they are new to this field. Here is my profile in socialspark i am new to it and it amazing to be with this community.

And what you want more than this sign up now and invite me as your friend we shall rock in socialspark. Even its easy for you to earn money online as well as know about other bloggers. Socialspark has a featured bloggers list by using props and drops using this you can get listed in featured bloggers list if you get a high props.

Free Website Monitoring Services

When a website grows and receives a high amount of content over a certain period of time, the number of visitors will increase, just like will the number of HTTP requests. In order to hold on to the visitors or customers of the website and to determine them to come back anytime, besides adding new content and making periodic changes and improvements, there is yet another thing you must consider. The monitoring of uptime-downtime cycles frequency will provide you useful information regarding the strategies necessary to improve the IT infrastructure and to maintain the optimal work flow for a web-based
business.

Various solutions exist to determine the characteristics of uptime-downtime cycles frequency and influencing factors: free or commercial desktop applications, web-based scripts or online services.

Online website performance monitoring services detect various aspects that could affect the number of uptime-downtime cycles. For example, the website availability can be conditioned by network structure, hardware malfunctions, web server operating system optimization level and other factors.

One of the existing free services designated to help you evaluate and improve the website content delivery quality by reducing the number of uptime-downtime cycles is mon.itor.us. It provides details regarding network and website status through continuous monitoring actions. From an AJAX user interface, you will be able to check the number of server uptime-downtime cycles, reports about visitors’ actions on a certain website, and more. The option to choose from various types of alerts (RSS, email or SMS) is also available and, as a consequence, information about the server and website status will be at hand anytime.

By correctly interpreting the monitoring results accumulated over a certain period of time, the major factors affecting the overall website uptime and performance will be identified and, consequently, they can be optimized or eliminated. The web hosting service reliability measured through the guarantee percent of server uptime can also be established. By selecting a competitive web hosting service and continuously monitoring and evaluating website performance, you can turn any web-based business into a real success story.

1Password 2.6.5 Available

Agile Web Solutions has updated 1Password, its password manager for Mac, to version 2.6.5. While the latest version is currently in beta, which means it might not be very stable, version 2.6.4 (stable) is also available for existing users to download and upgrade, free of charge.

The most recent 1Password we reported on was version
2.6.2, which packed a whopping 100 changes, and offered users the chance to get a 20% discount on TextExpander, a Mac OS X utility from the guys at SmileOnMyMac.

1Password 2.6.5 adds an Autosave in Safari, a Strong Password Generator window and the ability to generate non-web passwords, among other improvements. Agile Web Solutions has introduced support for Safari 4 Developer Preview, and improved credit card fill on skype.com and esellerate.com, to mention just two more changes brought by the latest version. Last, but certainly not least, a problem in digest password generator was also fixed.

1Password remembers all your online passwords that you can insert on any web page or form, any time, by using one single password. The application integrates directly into most browsers, and sports built-in anti-phishing and keylogger protection.

By using 1Password, Mac users can easily manage hundreds of passwords with one master key. The developers have also introduced the useful service to iPhones as well, but only through a limited web version that lets you take your information with you anywhere. The iPhone version of the app is on its way, nonetheless.

Currently, 1Password is compatible with the following browsers and their respective versions: Safari 2.0+, Firefox 1.5+, Camino 1.6.1, OmniWeb 5.5+, DEVONagent 2.0+, or NetNewsWire 2.1+. The software calls for Mac OS X v10.4 or later.

Users should note that the master password will be used to protect their keychain data with military-strong encryption. It is very important that you pick a strong password and commit it to memory.

Doctor Says Many Suffer from “Internet Addiction”

If anyone needs further proof of how un-informed some people might be when talking about the Internet and online games, just take a look at an article that is currently running in the The Boston Globe. Dr. Jerald Block is presented as being a psychiatrist that specializes in helping those that spend too much time in MMOs. He also wants to coin "Internet addiction" as a new term used in diagnosis. Too bad he
doesn't really know what he is talking about.

He says that, while many of those that he treats have problems with an addiction to all things related to the Internet, it's far harder to care for those that have a compulsion to play games over the Internet. In his own words, the doctor says that these "people feel a lot of shame around computer games."

He goes on to describe the experience of someone that played EVE Online and how, because of what happened to him in the game, the man had to seek treatment. And he says that there are more people like that that need help – naturally, one of the first steps in offering it is to add "Internet addiction" as a possible diagnosis.

Well, I don't mean to be rude, but the good doctor barely grasps the terms he is using. It's one thing to be compulsively drawn to MMOs and quite another thing to be addicted to the Internet. There are countless examples of people that are constantly checking their e-mail compulsively, yet the ones that get tagged for being addicted are just the ones playing World of Warcraft. I am not denying the fact that there are those that have an "unhealthy" relationship with games or with MMOs, but maybe this is just a symptom of some deeper problem that they face within themselves rather than a diagnosis in itself.

Coining a term such as "Internet addiction" would only serve to add fuel to the already burning fire of controversy that surrounds videogames in some mediums. A better idea would be to try and understand gamers, those that behave normally and those that act erratically, rather than to simply apply to them such a condescending and unhelpful tag as "Internet addiction" is.

Earn Money Online

So many professionals and students are waiting and searching to earn money from their home computer in internet. Even so many time I started searching to earn money online. I finally found that blogging is the best way to earn more money in this internet world. Using blogs you can earn money by writing reviews in your blog. Payperpost is a excellent gateway to earn money for bloggers. They offer you lots of reviews and they pay for each review you write. Even I am the blogger in payperpost for a year I feel comfortable and now im earning more from payperpost.

Not only by writing reviews you can earn money from affiliate program in payperpost. You will feel great to work with payperpost there are many events happening with them like blog of the day. So that you can get very good traffic to ur blog which increase your review payments. Here I feel pretty to introduce a great service from payperpost. I prefer all bloggers should know about payperpost and their services. Signup with payperpost right now if you have a blog which is 30days old and having atleast 10 post and make money online forever. Happy Blogging….Join PayPerPost Family.





*Sponsored Reviews