bugtraq - Microsoft Antispyware Beta window docking issue

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 3 Mar 2005 19:46:55 +0100
From: Jeroen van Rijn <xananda@...il.com>
To: bugtraq@...urityfocus.com
Subject: Microsoft Antispyware Beta window docking issue

If you place your taskbar to the righthand side of the screen (I'm
assuming it'll do this for all positions other than the default
bottomhugging one):

- Popup messages about hosts file changes and other such notifications
float up and up and up and are damned hard to read or click. I'm
assuming this is a bug in their window docking code.

How is this a security issue? A user cannot confirm or deny the action
taken by the software and has to hope the default action doesn't
interfere with system operations.

Another bug, not specifically security related, but which I found in
Antispyware nonetheless is that it has a habit of doing scheduled
scans twice. By this I mean that if I cancel the scheduled scan
(because I know the system to be clean and can use the resources
better at the moment), the software will happily popup again 10
seconds later, and start scanning again.

If anyone knows of an official Microsoft channel where these bugs can
be reported... I'm yet to find one in the software itself.

- Jeroen.

-- 
0x00FEEDFACECOFFEE