Open Tech Support
Open Tech Support Archives
Back to HomeCommunityReviewsGuidesDownloadsTech LinksMarketplaceContact Us
 »  SITE NAVIGATION
»  OTS Home
»  OTS Forums
»  OTS Archives

»  About our site
»  Search our site
»  Support our site

»  What is this site?
»  Who are we?
 
 
 »  ADVERTISMENT
 
  Pages: 1

Flaw found in MS security patch

(Click here to view the original thread with full colors/images)


Posted by: Tweaker

A flaw in a software tool just released by Microsoft could lead software developers to inadvertently write programs that are vulnerable to attack, according to security specialists who discovered the flaw.

The security problem is said to lie with the compiler that accompanies the new Visual C++.Net, just one of several tools included in Visual Studio.Net that Microsoft shipped Wednesday. Visual Studio.Net comprises new versions of the company's software development tools, including Visual Basic, Visual C++ and its new Java-like language, C#.

Software security company Cigital says the compiler contains a flaw that can allow an attack called a "buffer overflow" to be initiated. A compiler is software that translate the code that programmers write into the language that computers understand.


You could make the argument that it is up to the programmers to make sure the software doesn't have that vulnerability. Does Microsoft now have to make sure that the programs written with their software is bug free is well? I would think that the authors would be responsible for that. On the other hand the program design makes it easy to write unsafe code, you must take extra care to work around those features".

Article here

Source: ZDNet News



Posted by: SKYHN

Microsoft releases software with bugs and security holes.

Microsoft releases fixes and patches to fix the previous software with bugs and security holes with new bugs and security holes.

Whats up with that?

http://www.mugshots.org/misc/bill-gates.jpg



Posted by: Null Actor

The subject/title of the article is wrong.

The security flaw has nothing to do with the recently released patches.



 
Copyright 2000-2008 Open Tech Support.  All Rights Reserved.  Site Design and Development by Tolitz Rosel.