10 Bulletins

[Spider M. Mann]

Check out what I found on Slashdot.org pertaining to the new security bulletins. This is the original post, and below that is a followup post by someone else - this is rich...

Ten Security Bulletins From Microsoft
Microsoft
Security

Posted by michael on Tuesday October 12, @07:19PM
from the making-america-safer dept.

wschalle writes "Microsoft has released 10 "new" security bulletins, including one pertaining to a vulnerability in the Windows Shell, apparently exploitable via the web. The shell vulnerability only allows code execution as the user viewing the malicious web site. Aren't you glad your shell is web-enabled? The recent GDI+ vulnerability is re-released here as well as a vulnerability in zip compression handling."

And now the followup:

Re:10 Bulletins? (Score:5, Funny)
by ktakki (64573) on Tuesday October 12, @09:22PM (#10509711)

MS10-01: Vulnerability in Internet Explorer may cause user to worship other gods.
MS10-02: Buffer overrun in Graven Image processing.
MS10-03: Vulnerability in RPC Service may cause the name of the Lord to be taken in vain.
MS10-04: Vulnerability in Task Scheduler may prevent computer from resting on the Sabbath Day.
MS10-05: Vulnerability in Windows Shell may allow child process to kill parent process.
MS10-06: Buffer overrun in DCE Locator Service may cause abnormal program termination.
MS10-07: Vulnerability in Outlook/Outlook Express may lead to adultery.
MS10-08: Vulnerability in MSKerberos may allow remote user to steal.
MS10-09: Vulnerability in Excel may allow workbooks or spreadsheets to bear false witness.
MS10-10: Vulnerability in Internet Explorer may cause user to covet neighbor's ass.

-k.

I almost peed myself when I read that.

hope this wasn't too offbeat for you guys - I thought we could all use a good laugh at Uncle Bill's expense.

-Spider

[AlxRogan]

I haven't checked out the comments section in /. for a long time, but indeed this one was funny. :)

[Gadsden]

That is very worthy of packetstorm's humor archive! :p

[c0nc0kted]

Check out what I found on Slashdot.org pertaining to the new security bulletins. This is the original post, and below that is a followup post by someone else - this is rich...


-Spider

With GDI exploit code being posted last month, and the Metasploit engine out there for use, does anyone care to render an opinion as to why we haven't already seen a full blown GDI virus yet? If you look at recent history we are more or less overdue.