Morethan 2M IE9 beta downloads

Microsoft on 2oth Sep announced that more than 2M users had downloaded its Internet Explorer 9 (IE9) beta in the two days after its Sept. 15 launch.

They also quoted that Microsoft’s “Beauty of the Web” site had attracted nine million visitors and has over 26 million page views in the same period.

Mozilla crashes.. and IE9 bets on its speed

Mozilla has stopped releasing security updates to Firefox users as it investigates a bug that caused computers to crash last week.  Mozilla has confirmed that it has stopped offering updates for Firefox 3.5.12 and 3.6.9 because of a bug that crashed some users’ machines.

At the same time IE9 bets on its speed compared to the previous releases. The complete review on the Internet Explorer 9 browser was discussed in CW article.

Older version of QuickTime causes Internet Explorer vulnerability

As per a Spanish security researcher, an older version of the QuickTime plug-in causes vulnerability, which primarily targets IE users. [Link].

The attack code that was written by him works with IE on a machine running Windows XP, Vista or Windows 7 that has QuickTime 7.x or the older QuickTime 6.x installed.

Apple is working on releasing a patch for the same. However, IETips.net recommends its users to either uninstalling or disabling the QuickTime plug-in.

However, Symantec recommended that users set the killbit for the QuickTime ActiveX control or rename the plug-in. Instructions can be found on the below Microsoft’s support site:

http://support.microsoft.com/kb/240797

Fix for DLL Attacks – CWDIllegalInDllSearch registry entry is available to control the DLL search path algorithm

Microsoft on 31st August has published an automated tool to enable the Windows users to easily block attacks exploiting vulnerabilities in a host of Windows applications.
The patch that was released earlier seems to be a confusing to its users, which made Microsoft to deliver it using Fixit.

The DLL load hijacking vulnerabilities exist in many Windows applications because the programs don’t call code libraries — dubbed “dynamic-link library,” or “DLL” — using the full pathname, but instead use only the filename. Criminals can exploit that by tricking the application into loading a malicious file with the same name as the required DLL. The result: Hackers can hijack the PC and plant malware on the machine.

This fix will:

- Remove the current working directory from the library search path.
- Prevent an application from loading a library fr

Patch: Windows DLL load hijacking exploits go wild

In less than a day post release of the DLL patch by Microsoft, it has been identified that around 41 Microsoft applications are vulnerable, and need immediate patching which includes MS Powerpoint 2010, and Windows Live which is shipped with Windows Vista operating system.

Other exploits aimed at leveraging DLL load hijacking bugs in uTorrent and Wireshark, a BitTorrent client and network protocol analyzer, respectively.

IETips.net recommends all its readers installing the respective patch immediately.

Tool from Microsoft to block DLL load hijacking attacks

Microsoft has released a tool to address a potential zero-day attacks against a large number of Windows programs.

The tool restricts the loading of remote libraries and blocks the loading of DLLs from remote directories, such as those on USB drives, Web sites and an organization’s network, and all possible vectors.

The tool can be download from MS Download Link

CloudBerry TweetIE – The superb plugin for IE

CloudBerry Twitter plug-in for Internet Explorer helps you to post excerpts from the websites you visit with a click of the button and attach a short URL to the source page. It allows you to select the text on the web pages and tweet it to your friends, add link to the source with Chilp.

No registration required.  Try it out. For more information, visit the IE Addon link

Google Analytics Opt-out Browser Add-on

To provide website visitors with more choice about how their data is collected by Google Analytics, google has launched a new add-on called “Google Analytics Opt-out Browser Add-on”. The add-on communicates with the Google Analytics JavaScript (ga.js) to indicate that information about the website visit should not be sent to Google Analytics.

If you want to opt out, download and install the add-on for your current web browser. The Google Analytics Opt-out Browser Add-on is available for Internet Explorer (versions 7 & 8 and also may work on IE 9), Google Chrome (4.x and higher), and Mozilla Firefox (3.5 and higher).

To know the steps, you may visit the MSDN website – Link