Adobe Security Flaws

Updating your software is crucial to the health of computer. Software updates provide fixes for any holes in your security as well as general bug fixes for your software to make it run more smoothly. Ex. Screen glitches, the OS being slow or lagging, etc. Sometimes when new hardware comes out an update to your OS and other software will be required in order to use the new hardware. Updates specific to your security software provide protection against new malware that has been found.

They have expand their business from only on computer software and hardware to online search engine, home gaming devices and smartphone, those business are the popular business in the world, Microsoft is trying to adapt the new market.

On April 4th of this year, Microsoft issued security bulletin MS15-034; this security bulletin explains a vulnerability that “could allow remote code execution if an attacker sends a specially crafted HTTP request to an affected Windows system.” Later, on June 9th, Microsoft issued another security bulletin, MS15-056; this security bulletin explains a vulnerability that “could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker who

0-day Vulnerabilities Exploitation – an attack that takes advantage of a vulnerability for which no patch is yet available.

The Web Developer processed and documented Mark Oliver’s WDS Server Vulnerability report from last week still shows some vulnerabilities that patch but are still showing. The Adobe Flash vulnerabilities, plugins 106606 and 106655 have been

The developer updated the vulnerability tracking spreadsheet with the final up-to-date vulnerability information and sent it to Mr. Curtis to apprise him of the remediation statuses.

I would have this set so it can automatically check for those updates as needed because it can be cumbersome to constantly check for updates manually. Next, I would set the security zone in Internet Explorer. Although Prowse does not have a recommendation as to which zone offers the best balance between security and functionality, he suggested most organizations are set to high (Prowse, p.92). I would keep these security levels at the default settings of Medium- High or higher because it appears to be a healthy balance of security and functionality. Another security feature I would use with Internet Explorer is the SmartScreen Filtering. This feature helps identify possibly malicious sites and prevent site access and downloads (“Browser Security Settings”, 2016). Because ActiveX is a can be become a pathway for malicious material, this feature would be turned off a

First, Microsoft ‘encouraged’ Compaq, Apple, and other computer manufacturers to promote only Internet Explorer, and to make that the default browser on their PC. This encouragement came in the way of threats to eliminate or delay licensing of operating systems, providing the browser for free to internet access providers, and bundling the software with the operating system under the guise of interactive ease for the consumer. This manipulation led to an increase in the browser’s sales by 45 to 50%, which paralleled the decline Netscape experienced in their market sales in 1998.6

According to the plaintiff, however, the anticompetitive behavior extended beyond the OEMs and into its agreements with IAPs and independent software vendors (ISVs). Microsoft's exclusive agreements with 14 of the 15 leading providers (e.g. America Online), for example, effectively cut off one of two major distribution channels for competing browsers (United States v Microsoft, 2001). “By ensuring that the majority of all IAP subscribers are offered IE either as the default browser or as the only browser, Microsoft’s deals with the IAPs clearly have a significant effect in preserving its monopoly” (United States v Microsoft, 2001). With respect to ISVs, Microsoft promised preferential treatment and support for ISVs that agreed to use IE as the default browser in any hypertext-based program user-interface and use its “HTML Help” file, (which was only found in IE) to implement the

Microsoft also gives them preferential treatment through Windows and in return, they make their web pages to be compliant with the Microsoft browser. Most web pages even have a little disclaimer that says, "Best viewed with Microsoft

In May 1998, the United States Department of Justice and a group of nineteen state plaintiffs filed for four type of antitrust violation against Microsoft Corporation as they believe that Microsoft has used its monopoly in operating system software to protect its dominance and to eliminate competitors. Microsoft engaged in abusive practices to the 1890 Sherman Antitrust Act sections 1 and 2 (Scholarship). Microsoft preinstalled Internet Explorer on personal computers and raise the price of the Window’s software. Microsoft force users to use Internet Explorer as a default browser which prevented other browsers that were in competition being downloaded which put an inconvenience to their consumers. Microsoft attempted to dissuade Netscape from

This scripting language is also increasingly being used as an attack mechanism by predators that exploit vulnerabilities within the client’s web browser; unpatched software or other JavaScript based applications for mounting their attack (Karanth et al, 2011). The assailant commonly obtains the information for identify theft and for personal financial gains (Wadlow, 2009).

First, MS tied IE to Windows 95 and potentially its successors. As MS's Christian Wildfeuer wrote in 1997, “[It would] be very hard to increase browser share on the merits of IE 4 alone. It will be

Adobe Reader is a software package that allows users to open and access PDF (portable document format) documents. The aforementioned version was released during July 2003. The particular issues pertaining to this version of Adobe were identified in the CVE (see: glossary) and each scored 9.3 on the CVSS (see: glossary). The vulnerabilities identified include the ability for “…remote attackers to execute arbitrary code via a crafted PDF” which then results in memory corruption, execution code overflows and the ability to execute a DoS attack (Adobe, 2007).

Flash is abhorrent and it needs to die and Adobe is taking a shot at slaughtering it. However, until the point that Flash