a graphic that was submitted for the last edition of "Tina" magazine, 1991

US-CERT Technical Cyber Security Alert TA05-102A — Multiple Vulnerabilities in Microsoft Windows Components

Overview

Microsoft has released a Security Bulletin Summary for April, 2005. This summary includes several bulletins that address vulnerabilities in various Windows applications and components. Exploitation of some vulnerabilities can result in the remote execution of arbitrary code by a remote attacker. Details of the vulnerabilities and their impacts are provided below.

I. Description

The list below provides a mapping between Microsoft’s Security Bulletins and the related US-CERT Vulnerability Notes. More information related to the vulnerabilities is available in these documents.

Microsoft Security Bulletin MS05-020: Cumulative Security Update for Internet Explorer (890923)

VU#774338 Microsoft Internet Explorer DHTML objects contain a race condition

VU#756122 Microsoft Internet Explorer URL validation routine contains a buffer overflow

VU#222050 Microsoft Internet Explorer Content Advisor contains a buffer overflow

Microsoft Security Bulletin MS05-02: Vulnerability in Exchange Server Could Allow Remote Code Execution (894549)

VU#275193 Microsoft Exchange Server contains unchecked buffer in SMTP extended verb handling

Microsoft Security Bulletin MS05-022: Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)

VU#633446 Microsoft MSN Messenger GIF processing buffer overflow

Microsoft Security Bulletin MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service (893066)

VU#233754 Microsoft Windows does not adequately validate IP packets

II. Impact

Exploitation of these vulnerabilities may permit a remote attacker to execute arbitrary code on a vulnerable Windows system, or cause a denial-of-service condition.

III. Solution

Apply a patch.

Microsoft has provided the patches for these vulnerabilities in the Security Bulletins and on Windows Update.

good news/bad news… and since there’s nobody to choose which comes first, you get my choice, and i’m not sure which is which.

we’ve had two offers on our house, and despite that, we continue to have to let total strangers walk around and “preview” the house, because the offers are not finalised yet: one of them was an investor who had bunches of money he was willing to throw at us with no contingencies or prerequisites, but he suddenly developed some “family emergency” or something like that, which made him have to leave for europe, so he withdrew the offer. the other one is from a family who is buying their first house, and their offer comes with some things that make us question whether they are actually going to get what they are asking for, and may end up not going through at all because they may want us to spend money to fix things – which is why we’re selling in the first place: we don’t have enough money to pay the mortgage, let alone fix things that they may want to have fixed before they’ll actually give us money.

however, the owner of the house we want to buy wants to sell to us, and has basically said that she’s ready to move at the end of april, so we’d be able to move in around the 1st of may… except that when the people who finance our mortgage, who have already approved a new mortgage based solely on moe’s income, found out that the “house” is actually a “glorified trailer”, they changed their minds and now say that they won’t lend us money unless we put up 30% of the cost of the “trailer” as a down payment. apparently the house is a “single-wide”, which are the most frequently defaulted-on mortgages of any out there, and despite the fact that we have great credit, they say that a “single-wide” is more like a car (or, more specifically, a trailer) than a house, and they’re afraid we’ll move it somewhere else (as if)… so they’re willing to loan us money to buy the “single-wide” if we’re willing to put down 30% to start with, but not at all if it is to be a “no down payment” mortgage, which is what we can afford… and if we recind our offer at this point, we’ll lose our earnest money, which we can’t afford to do.

SUCK!

the whole thing has put enough stress on moe that i’m starting to worry about her, along with all of the other things i’ve got to worry about. 8P

oh, yeah… the moisture festival is done for another year. i’m told that we won’t have to wait until next year to “get moist” again, but nothing apart from that.

My japanese name is 福田明 (bright happy rice field).
Take your real japanese name generator! today!
Created with Rum and Monkey‘s Name Generator Generator.

apparently kids in japan play a game called kancho, which involves “kids clasping their hands together, sticking out their first fingers, and shoving them up your butt”… here’s a link to the whole story for the morbidly curious, as well as a link to the JET Programme, for those who want to go and find out for themselves whether it’s really true or not.

Leftist Hatred Behind Pie-Throwing Thugs… “Pie-throwing thugs attacking conservative speakers on college campuses are motivated by left-wing hatred…” or they could just be getting totally fed up with doing things according to the rules and getting shot down, overridden, and out-“voted” at every attempt. hrmph!