Home Messages Index
[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index

[News] [Rival] Microsoft Knowingly Ignores Remote Code Execution Vulnerability

  • Subject: [News] [Rival] Microsoft Knowingly Ignores Remote Code Execution Vulnerability
  • From: Roy Schestowitz <newsgroups@xxxxxxxxxxxxxxx>
  • Date: Tue, 20 Nov 2007 04:34:08 +0000
  • Newsgroups: comp.os.linux.advocacy
  • Organization: Netscape / schestowitz.com
  • User-agent: KNode/0.10.4
The fine line Between Security and Usability

,----[ Quote ]
| Another issue which came to light last week may pose more of a problem for 
| business and home users, especially given that Microsoft acknowledged to the 
| discoverer that they would not be patching the remote code execution 
| vulnerability that he had reported -   
| 
| "Microsoft replied me that they would not fix this vulnerability, it looks 
| like they will not acknowledge vulnerabilities which are from .mdb file". 
| 
| [...]
| 
| As far as JET .mdb files go, it seems that Microsoft has deprecated the 
| technology somewhat, but it still continues to be supported by the latest 
| versions of Access (Access 2007).  
`----

http://www.beskerming.com/commentary/2007/11/19/304/The_fine_line_Between_Security_and_Usability

JET is also responsible for having the elections ruined.


Related:

,----[ Quote ]
| Problems found in an audit of Diebold tabulation records from an Ohio
| November 2006 election raise questions about whether the database got
| corrupted during the tabulation of election results...
| 
| The database is built from Microsoft's Jet database engine. The
| engine, according to Microsoft, is vulnerable to corruption when a lot
| of concurrent activity is happening with the database, such as what
| occurs on an election night [and Microsoft advises againt using Jet in
| a complex environment]...
| 
| The report mentions that election staff had trouble with the server
| crashing and freezing on election night....
| 
| The report notes that with punch card machines election officials used
| to be able to determine definitively if all ballots had been counted
| in the results....
`----

http://blog.wired.com/27bstroke6/2007/04/diebold_vote_da.html

[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index