Interesting article about how user-mode code can access kernel address space and setup a call gateway descriptor GDT without using a driver.
Software and web application security
MSFT Sec feed- MS09-068 - Important: Vulnerability in Microsoft Office Word Could Allow Remote Code Execution (976307)
- MS09-067 - Important: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (972652)
- MS09-066 - Important: Vulnerability in Active Directory Could Allow Denial of Service (973309)
- MS09-065 - Critical: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (969947)
- MS09-064 - Critical: Vulnerability in License Logging Server Could Allow Remote Code Execution (974783)
- MS09-063 - Critical: Vulnerability in Web Services on Devices API Could Allow Remote Code Execution (973565)
- MS09-062 - Critical: Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488)
- MS09-061 - Critical: Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)
- MS09-060 - Critical: Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution (973965)
- MS09-059 - Important: Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (975467)
