Input Validation, du Jour →

October 13, 2014 by Marc Handelman in All is Information, Cruft, Data Security, Information Security, Operating System Security, Vulnerabilities

Not to be undone by the well reported Bourne Again Shell vulnerability of two weeks past, now, via, Robert Lemos, writing at ArsTechnica, comes this sordid tale of poor punctuation coupled with input validation issues. In which, the vulnerability at hand, opens up a logical path within the Microsoft Corporation (NasdaqGS: MSFT) Windows in-built shell, where all the badness is vectored...