In October, Microsoft warned of a dangerous command execution vulnerability for users running Internet Explorer 7 on systems running Windows XP or Windows Server 2003. The flaw began as an issue in FireFox, but if a user is running FireFox on a system that also has IE7 installed as well as Windows XP or Windows Server 2003, a specially formed URL in IE7 could launch an attack in FireFox. Listen to security expert Serdar Yegulalp's take on this issue by playing our podcast below.
It was also revealed this month that Microsoft was downloading updates to their Windows Update service, even if users had specifically configured their systems not to allow such downloads. Can users take legal action in this type of situation? Is this similar to when companies in the past put data collecting rootkits on their products? Find the answers to this questions in our podcast.
Press play to begin the podcast.
0:33: Serdar's take on the recent URI vulnerability in Internet Explorer 7.
3:21: The risks of Microsoft automatically downloading updates to the Windows Update service.
5:39: The implications of future "stealth" downloads.
To save this "What's hot in Microsoft security podcast," play it with this URL and then save it to a disk.
About the author: Serdar Yegulalp is editor of the Windows Power Users Newsletter. Check it out for the latest advice and musings on the world of Windows network administrators -- and please share your thoughts as well!
