19 August 2008
Killbit for File Downloader
All of you who read our blog knows a lot about killbit for Image Uploader and Microsoft Security Advisory (953839) that stoppes using of unsafe versions.
All of you who read our blog knows a lot about killbit for Image Uploader and Microsoft Security Advisory (953839) that stoppes using of unsafe versions.
As I announced a week ago, Microsoft has released security update which includes killbits for old vulnerable builds of Image Uploader.
Only one week left before Microsoft release Cumulative Security Update for ActiveX killbits. They scheduled it for August 12, 2008 at approx 10am PST.
In my previous post I have mentioned about release of Image Uploader 5.1 (and 4.7) which has a number of security fixes (few known heap overflow and a bunch of potential problems). To prevent malicious persons to exploit these issues, we are releasing a killbit for all version and strongly recommend each customer of Image Uploader to get an update (which is free for appropriate major build).
I have and exciting update about the security issue – we have completed all of our audits and feel we have secured Image Uploader.
It may sound too bold, but I think we can say this way now. We get rid of all known vulnerabilities (we have found few new while testing/refactoring IU).