2 years ago

Category: Software, Security, Microsoft, firewall, encryption

Learn about new features, changes, and improvements to UpGuard: Though Windows Server 2008—with features like hard drive encryption, ISV security programmability, and an improved firewall—is a significant leap forward in terms of security when compared to its predecessor Windows Server 2003, it is certainly not without its own security flaws. An integer underflow in Uniscribe—Windows APIs that enable control of typography and complex script processing—could allow a remote attacker to execute arbitrary code via a specially crafted font.

This Windows Server 2008 vulnerability could allow remote authenticated users to execute arbitrary code via a specially crafted string in a Server Message Block (SMB) server error-logging action.

Font vulnerabilities are a popular way for attackers to gain access to a system, and this particular Windows Server 2008 flaw could allow remote attackers to execute arbitrary code via a specially crafted TrueType font.

Schannel in Windows Server 2008 could allow a remote attacker to execute arbitrary code via specially crafted packets.