Outlook Social Connector

by hirantha Tue, July 13 2010 11:15

The Outlook Social Connector allows you to synchronize your contact data right into Outlook and obtain information about your friends and colleagues. You can also see status updates from various networks and recently posted files.
Use the Outlook Social Connector to display a quick view of related Outlook content when you click on an email from a contact, such as recent e-mail conversations, meetings, and shared attachments.
Developers can connect and feed social streams from line-of-business applications or integrate their solutions directly into Outlook.

Download : http://www.microsoft.com/downloads/details.aspx?FamilyID=b638cc14-11e5-448a-b5a6-4f553ce81b94&displaylang=en

Tags: , ,

Instant Messaging | Microsoft | Networking | Office

Vulnerability in Pidgin

by hirantha Mon, August 24 2009 10:00

CORE security technologies published a vulnerability in libpurple.  Libpurple is the backend frame work to many Instant Messenger clients.

Pidgin, Finch, Adium, Meebo, and Gaim among others.  Although CORE only specifically mentions GAIM, Libpurple, Pidgin, and Adium specifically, the other libpurple based ones may be vulnerable as well.

Versions of Libpurple <= 2.5.8 (Pidgin <=2.5.8 and Adium <=1.3.5) are vulnerable.  The vulnerability is an exploit in the function msn_slplink_process_msg() which handles instant messages from the MSN network. 

All it takes to exploit this vulnerability is to receive a message from another MSN user.  They do not have to be on your buddy list.  Unless your buddy list states that you only allow specific users to contact you, it's the only mitigation step.  (Other than patching or logging off of the MSN network.)

Solution:

Upgrade to a version of your respective IM client that is based off of pidgin.  Non vulnerable versions of Libpurple are >=2.5.9.

Tags: ,

Security | Instant Messaging