Vulnerabilities
Firefox 9.0 and four critical flaws fixed
By Gina on December 22, 2011 | Vulnerabilities
Firefox 9.0 comes with a faster JavaScript engine but the main thing it brings is fixes to four serious vulnerabilities that affect its earlier versions (except v3.6). The security hole could allow an attacker to execute malicious code on a machine using a specially arranged web page. Firefox 9.0 version fixed flaw that enabled the hackers to access out-of-bounds memory areas. Moreover, Firefox 9. Read more.
Major flaw of Adobe Reader and Acrobat 9.x is patched
By Gina on December 16, 2011 | Vulnerabilities
Adobe released Tuesday patch for vulnerability that was found earlier in Reader and Acrobat 9.x. Attack due to Adobe was aimed towards Reader 9.x using malformed PDF documents that were attached to fictitious emails.Day after the Adobe discovered vulnerability Symantec security researchers announced that attacks had targeted defense contractors and other individuals. As a result, hackers were hoping to steal confidential information for their malicious intentions. Read more.
Adobe Reader targeted again: Acrobat vulnerability
By Gina on December 7, 2011 | Vulnerabilities
Adobe announced today that hackers are exploiting security hole in Adobe Reader and Acrobat. Malicious hackers are trying to use flaw that exists in Adobe Reader X (10.1.1) and its earliest version for Windows and Mac systems. For UNIX systems cybercriminals may exploit Adobe Reader 9.4.6 and earlier 9.x versions. Adobe Acrobat X (10.1.1) and its earlier versions for Windows and Macs. Read more.
From „White hat“ Charlie Miller was turned to „Black hat“
By Gina on November 9, 2011 | Vulnerabilities
On Monday, Apple researcher Charlie Miller was punished for finding flaw in Apple's restrictions on code signing on iOS devices which would allow hackers to use applications sneaked into the Application Store to download and run unsigned code. For discovering such security vulnerability, Apple revoked Charlie Miller’s application developer license and suspended him for one year from Apple's developer program. Read more.
Temporary remedy against Dugu
By Gina on November 4, 2011 | Vulnerabilities
Microsoft released temporary patch for a critical Windows vulnerability. Dugu infection has already made manufacturers of industrial systems suffer because of serious malware. On Tuesday, Microsoft dropped advisory which claims that unknown flaw in the Win32k TrueType font-parsing engine made changes of every supported version of Windows. Read more.
