Severità: Alto

9 ottobre 2007

Sommario:

Oggi, Microsoft ha liberato due bollettini di sicurezza che descrivono le vulnerabilità che interessano i pacchetti differenti del Microsoft Office compreso la parola (per Windows ed il Mac), l'assistente 2007 di SharePoint dell'ufficio ed i servizi 3.0 di Windows SharePoint. Attraendo uno dei vostri utenti nell'apertura della lima con cattiveria formata dell'ufficio, un attacker ha potuto sfruttare il più difettoso di questi difetti eseguire il codice sul calcolatore del vostro utente, con i privilegi del vostro utente, potenzialmente guadagnanti il controllo di quel calcolatore. Se usate l'ufficio, la parola, o SharePoint nella vostra rete, dovreste trasferire, esaminare e schierare immediatamente le zone dal sistema centrale verso i satelliti adatte.

Esposizione:

Due bollettini di sicurezza del Microsoft descrivono le vulnerabilità trovate nella parola, nell'assistente 2007 di SharePoint dell'ufficio e nei servizi 3.0 di Windows SharePoint. Il sommario sotto le liste vulnerabilità da il più su a severità più bassa.

MS07-060: Vulnerabilità di corruzione di memoria di parola

Il Microsoft Word per Windows ed il Mac soffre da una vulnerabilità non specificata di corruzione di memoria. Attraendo uno dei vostri utenti nel trasferimento dal sistema centrale verso i satelliti e nell'apertura del documento dal sistema centrale verso i satelliti con cattiveria messo dell'ufficio, un attacker può sfruttare questa vulnerabilità per eseguire il codice sul calcolatore di quell'utente, con quel livello dell'utente dei privilegi e dei permessi. Se il vostro utente ha privilegio amministrativo locale, il attacker guadagna il controllo completo della macchina della vittima. Microsoft’s bulletin doesn’t specify exactly what sort of Office document triggers this vulnerability. We assume typical Word documents (.DOC) trigger the flaw, but we also have to assume that other Office documents could potentially trigger it as well.
Microsoft rating: Critical.

Tuesday, 2 October 2007, 1:52 pm
Press Release: Symantec News ReleaseNew Symantec Endpoint Security Solution Now Available

Beta customers experience significant cost-savings and increased security with new integrated offering

Symantec Corp. (Nasdaq: SYMC) raised the bar today for enterprise security by announcing the global availability of Symantec Endpoint Protection 11.0 and Symantec Network Access Control 11.0. Symantec Endpoint Protection integrates Symantec AntiVirus with advanced threat prevention in a single agent managed through a single console, delivering unmatched defence against malware and data loss for laptops, desktops and servers.

Today Symantec also released results from a third-party study of Symantec Endpoint Protection beta customers quantifying the operational efficiencies gained through the integrated, single agent endpoint security solution. The study, which was conducted by the Alchemy Group in August and September, highlights Symantec Endpoint Protection’s ability to significantly reduce the cost and complexity of securing endpoints in diverse business environments.

Highlights of the summary include:
• The ability to manage IT security operations from Symantec Endpoint Protection’s single management console has the potential to reduce the number of current management hours by an average of 75 percent. One customer expects to save 97 percent of the hours dedicated to weekly security related reporting.
• Symantec Endpoint Protection’s Application Control functionality, which can limit access to only approved applications at the endpoint, can be a key enabler in reducing costs and increasing operational efficiency. Network outages caused by unauthorised peer-to-peer applications are costing one customer more than two million dollars annually.

“Symantec

Friendly, useful features make this operating system a must-have for home users

By S. E. Slack, author and technology expert

Related Links • Watch Windows Vista demos

I’ve been using Windows Vista for several months now, first testing it and then writing my book, Breakthrough Windows Vista. Now I’m running the final version on my computer. The first thing you’ll notice about Windows Vista is the new Aero interface. It’s more polished than previous versions of Windows, and it also makes it easier to focus on your work. But aside from the user interface, there are several cool new features that my family and I use regularly. Once more people start using it on a widespread basis, there will be others like me saying, “Wow. An operating system can do this?”

Windows Vista can help you do a lot of things—new tools to help you organize, store, and edit your music and photographs are just two examples of how you can use the new operating system. In this article, though, we’ll discuss four ways that my family and I have already started

No matter what your computer experience, when you start using new versions of the software you most depend on, it can take some time to discover favorite new features and timesavers. So, think of this article as a shortcut to some great new shortcuts.

While no single article could possibly include them all, each of the tips that follow either does more than I expected at first glance or simplifies something I need to do regularly.

On This Page

Find whatever you need, when you need it

Find whatever you need, when you need it

You need to find information in a document you recently reviewed, but don’t recall the document name or location. Or, perhaps that information was actually in an e-mail message or on a Web site you recently visited. Windows Vista Instant Search doesn’t care where your information is. Like a loyal bloodhound, Instant Search will find almost anything you seek.

Just type one or more keywords in the search box at the bottom of the Start menu and then click the magnifying glass icon that appears beside the box. Within seconds, the closest matches for your search appear right in the Start menu, categorized by type of content. For example, in the image that follows, notice that the results for my keyword webcasts include Web sites I’ve recently visited, some documents, and several e-mail messages. If

This month, I am excited to announce the new Atlas Business Solutions donation program at TechSoup Stock. Their two human resource software products, Staff Manager and ScheduleAnywhere, make managing and scheduling your organization’s employees and volunteers easier. This new program can help managers in your organization reduce costs, save time, and streamline your operations. Please read on to learn more about this program’s product donations and eligibility requirements.

 

Two educational software products are now available through TechSoup Stock: Microsoft Encarta Premium 2008 and Microsoft Student with Encarta Premium 2008. Two more recent additions from Microsoft are the Core User and Device CAL suites, which each provide access to four key Microsoft servers in one convenient suite.

 

Our featured product this month is UltraKey 5.0, which teaches keyboarding skills to help your organization become more productive or to support your training programs. Finally, I would like to highlight some of the many community forums on TechSoup that can help answer your technology questions.

 

============================================

INTRODUCING THE ATLAS BUSINESS SOLUTIONS DONATION PROGRAM ============================================

Atlas Business Solutions, Inc. (ABS) is pleased to partner with TechSoup Stock to offer two donated software products that can help your nonprofit organization more effectively manage its employees and volunteers. This partnership enables TechSoup Stock to offer software supporting human resources for the first time.

 

Founded in 1991, ABS is a leading developer of easy-to-use business management software and was recognized as one of Software