Windows 2000 suffers millennium bug Malicious code execution possible thanks to flaw. Matthew Broersma, Techworld 22 April 2005 Microsoft has confirmed a security flaw in Windows 2000 that could allow attackers to execute malicious code via Windows Explorer and other programs. The flaw, involving a problem in the way the webvw.dll library validates document metadata, was disclosed earlier this week by security firm GreyMagic. The flaw could be exploited by distributing a malicious file which, when selected in Windows Explorer, could execute malicious script commands. More dangerously, an attacker could exploit the bug via a document on a remote SMB share, GreyMagic said. "Script commands that are injected in this manner will execute as soon as the malicious file is selected in Windows Explorer and will be executed in a trusted context, which means they will have the ability to perform any action the currently logged on user can perform," GreyMagic said in its advisory. "This includes reading, deleting and writing files, as well as executing arbitrary commands." Microsoft has confirmed that it is investigating the flaw, and as usual stated that it is not aware that any customers have been affected so far. The company has also criticised GreyMagic for posting proof-of-concept code along with its advisory. Stephen Toulouse of Microsoft's Security Response Center (MSRC), in a message posted on the Microsoft TechNet website, downplayed the danger posed by the flaw. "Significant user interaction would be required for an attacker to exploit this vulnerability," he wrote. Any attack would rely on Server Message Block (SMB) communication, which customers should block at the firewall level as a best practice, Toulouse said. No patch exists, but users can protect themselves by disabling the "Web view" option in Windows Explorer, Microsoft said. The company said it may patch the bug once its investigation is complete. The flaw affects Windows 2000 Professional, Server and Advanced Server versions, GreyMagic said. The affected library, webvw.dll, is used in displaying information in Windows Explorer's preview pane, which is enabled by default in Windows 2000 systems. An input-validation bug means an attacker could inject script commands into the "author" metadata field of a document, which could be executed when the metadata is processed by webvw.dll. Other applications using the library are also affected, GreyMagic said. "The malicious file does not need to be executed in order to activate the exploit, double-clicking is not required," the firm said in its advisory. "The exploitation takes place as soon as the file is selected." GreyMagic said it first notified Microsoft of the flaw on 18 January. (http://www.techworld.com/security/news/index.cfm?NewsID=3543)
No trecho it may patch the bug, may indica

Windows 2000 suffers millennium bug Malicious code execution possible thanks to flaw. Matthew Broersma, Techworld 22 April 2005 Microsoft has confirmed a security flaw in Windows 2000 that could allow attackers to execute malicious code via Windows Explorer and other programs. The flaw, involving a problem in the way the webvw.dll library validates document metadata, was disclosed earlier this week by security firm GreyMagic. The flaw could be exploited by distributing a malicious file which, when selected in Windows Explorer, could execute malicious script commands. More dangerously, an attacker could exploit the bug via a document on a remote SMB share, GreyMagic said. "Script commands that are injected in this manner will execute as soon as the malicious file is selected in Windows Explorer and will be executed in a trusted context, which means they will have the ability to perform any action the currently logged on user can perform," GreyMagic said in its advisory. "This includes reading, deleting and writing files, as well as executing arbitrary commands." Microsoft has confirmed that it is investigating the flaw, and as usual stated that it is not aware that any customers have been affected so far. The company has also criticised GreyMagic for posting proof-of-concept code along with its advisory. Stephen Toulouse of Microsoft's Security Response Center (MSRC), in a message posted on the Microsoft TechNet website, downplayed the danger posed by the flaw. "Significant user interaction would be required for an attacker to exploit this vulnerability," he wrote. Any attack would rely on Server Message Block (SMB) communication, which customers should block at the firewall level as a best practice, Toulouse said. No patch exists, but users can protect themselves by disabling the "Web view" option in Windows Explorer, Microsoft said. The company said it may patch the bug once its investigation is complete. The flaw affects Windows 2000 Professional, Server and Advanced Server versions, GreyMagic said. The affected library, webvw.dll, is used in displaying information in Windows Explorer's preview pane, which is enabled by default in Windows 2000 systems. An input-validation bug means an attacker could inject script commands into the "author" metadata field of a document, which could be executed when the metadata is processed by webvw.dll. Other applications using the library are also affected, GreyMagic said. "The malicious file does not need to be executed in order to activate the exploit, double-clicking is not required," the firm said in its advisory. "The exploitation takes place as soon as the file is selected." GreyMagic said it first notified Microsoft of the flaw on 18 January. (http://www.techworld.com/security/news/index.cfm?NewsID=3543)
No texto, downplayed significa

The last sentence reveals that Americans are:

hence in “hence to economic activity” (l. 19/20) introduces a(n):

The first paragraph begins with a(n):

The expression shrug off in the opening question can be replaced by:

In relation to Favela-Bairro, the survey indicated that city dwellers have shown to be:

According to the text, Favela-Bairro adopted the integral approach methodology:

The idea implied in the expression “from welfare to work” (l. 3/4) is one of:

No trecho, latest Linux ‘hype cycle’ report, “latest” significa que o relatório a que se refere o texto

No trecho, latest Linux ‘hype cycle’ report, “latest” significa que o relatório a que se refere o texto

Text 1 

Texts 1 and 2 have in common the fact that they are:

In the sentence, “Leaders carry out this process by applying their leadership attributes, such as beliefs, values…and skills” (lines 14 -16), the underlined expression means the same as:

According to Text 2 (lines 16 - 22), the difference between bosses and leaders is that:

“To inspire your workers into higher levels of teamwork” (Text 2, line 5) means to:

Text 2 affirms that good leaders:

Check the item in which there is a correct correspondence between the underlined words and the idea in italics.

In the Text 1, the words “daily” (line 6) and “currently” (line 22) could be replaced with, respectively:

Mark the correct statement concerning reference.