Skip to main content
MSRC

Month Archives: October 2013

Advance Notification Service for October 2013 Security Bulletin Release

Wednesday, October 02, 2013

Today we’re providing advance notification for the release of eight bulletins, four Critical and four Important, for October 2013. The Critical updates address vulnerabilities in Internet Explorer, .NET Framework and Windows. The Critical update for Internet Explorer will be a cumulative update which will address the publicly disclosed issue described in Security Advisory 2887505.

Software Defense: mitigating stack corruption vulnerabilties

Tuesday, October 01, 2013

Introduction One of the oldest forms of memory safety exploitation is that of stack corruption vulnerabilities, with several early high-profile exploits being of this type. It seems fitting therefore to kick off this Software Defense series by looking at the status of software defense today with respect to this age-old problem.