Microsoft Finally Patches URI Handler

closeThis post was published 11 years 6 months 9 days ago. A number of changes have been made to the site since then, so please contact me if anything is broken or seems wrong.

So, the URI handler patch that Microsoft developed last month has finally finished testing and was pushed out via Windows Update yesterday. I guess that means the ShellExecute() function is now properly sanitizing links it gets from external programs. Which means a banner day for security, since many vulnerabilities in software applications have now been fixed at a central location.

Microsoft also fixed a flaw in the Windows DNS server, eliminating one attack vector for man-in-the-middle exploits.

dgw

I am an avid technology and software user, in addition to being reasonably well-versed in CSS, JavaScript, HTML, PHP, Python, and (though it still scares me) Perl. Aside from my technological tendencies, I am also a theatre technician, sound designer, violinist, singer, and actor.

Leave a Reply

Your email address will not be published. Required fields are marked *

Notify me of followup comments via e-mail (or subscribe without commenting)

Comments are subject to moderation, and are licensed for display in perpetuity once posted. Learn more.