This patch eliminates security vulnerabilities in the Microsoft Internet Information Server. The vulnerabilities could allow a malicious Web site operator to misuse another Web site as a means of attacking users. This vulnerability, known as Cross-Site Scripting (CSS), results when Web applications don't properly validate inputs before using them in dynamic Web pages. If malicious Web site operators were able to lure a user to their site, and had identified a third-party Web site that was vulnerable to CSS, they could potentially use the vulnerability to ""inject"" script into a Web page created by the other Web site, which would then be delivered to the user. The net effect would be to cause the malicious user's script to run on the user's machine. The vulnerability can affect any software that runs on a Web server, accepts user input, and blindly uses it to generate Web pages. Microsoft recommends that all vendors check their products to see if any are affected by the vulnerability, and initiated a check of its own products, as well. Several features in IIS were found to be affected--some were found by Microsoft internal teams, and others were identified by customers--and this patch eliminates all of them.
Read the FAQ for more information.
People who downloaded this software also downloaded...
RIP Killer Popup Blocker 3.12
Keep your surfing private while stopping annoying pop-ups and Flash ads.
Email Privacy 3
Bypass your ISP's mail server and send e-mail directly to your recipient's mailbox.
Mirramail Encrypted Email 3.0
Send messages using a complete e-mail program.
My-iWallet 2
Protect your online log on using biometric authentication instead of passwords.
Anti-Spam Guard 4
Secure your incoming and outgoing e-mails and delete junk files.
Easy Login Assist 3.6
Manage your privacy data and log in to Web sites or applications automatically.
DeVault Pro 2009 R6
Organize, backup, encrypt, and share all your files via secure digital vaults.
LANwriter 1.0
Get an application for network CD/DVD writing, FTP and secure data publishing.
eCipher Free 1.6
Encrypt and send secure e-mail easily.
Cute Password Manager Pro 2008.1.3.9
Log into Web sites and fill forms with just a few mouse clicks.






