|
|
| Welcome! |
Hello, Guest
Login if you have a Softpedia.com account.
Otherwise, register for one.
|
|
30
| STORIES ABOUT: vulnerability |
|
| Only Vulnerabilities in Safe ActiveX Controls Are Exploitable in Internet Explorer |  | Microsoft's Internet Explorer is without a doubt the main vector of attacks, when it comes down to web-based threats. Its ubiquity, as well as its intimate integration into the Windows platform, makes it an excellent avenue for attacks. With IE6, Microsoft has gained an ill reputation for failing dramatically to protect end users. From IE6, which undoubtedly is an apex of insecurity compared to alternative browsers, the Redmond compan ... [read more >>] | | 06 February 2008, 07:38GMT | (c) 2008 Softpedia |
| Do NOT Use Yahoo!’s Music Jukebox |  | The Yahoo! plan to head towards free (if possible) and ad-supported music downloads is a reality and a pitching point for the company’s future. Only one impediment has surfaced this far, namely the vulnerability discovered by Krystian Kloskowski, a Polish security researcher, that might convince Yahoo!ers that the company is not as saf ... [read more >>] | | 04 February 2008, 10:52GMT | (c) 2008 Softpedia |
| uTorrent Must Be Updated ASAP! |  | uTorrent, one of the most popular BitTorrent download clients available on the web, must be updated as soon as possible as a new vulnerability has been discovered in the application. SecurityFocus today reported that certain releases of both BitTorrent and uTorrent include a "peers windows remote denial of service vulnerability."
According to the report, uTorrent 1.7.5, 1.6.1, 1.6 and BitTorrent 6.0 are all affected ... [read more >>] | | 17 January 2008, 14:31GMT | (c) 2008 Softpedia |
| $20,000 for a Nasty Crumb of Windows |  | There are always leftovers and crumbs from the Windows feast. And one nasty crumb of the Windows operating system can go as high as $20,000. This is the price that a security research company is willing to cough up for a single zero-day vulnerability in Windows. Digital Armaments has failed to specify the Windows version ... [read more >>] | | 17 January 2008, 07:41GMT | (c) 2008 Softpedia |
| And Excel Is Back with a Vengeance |  | Microsoft has confirmed that the Office suite is once again under fire at the beginning of 2008. However, it seems that attacks only target the Excel component in a variety of Office versions. Concomitantly with revealing that a Critical, Zero-Day vulnerability is being actively exploited in the wild, the Redmond company provided assurance that users of the latest versions of the Office System are not at any risk from attack. ... [read more >>] | | 16 January 2008, 02:56GMT | (c) 2008 Softpedia |
| Security?! What the Heck Is It?! |  | Security company Secunia proved us that some people simply ignore the basic security measures and get their computers vulnerable to attacks without even knowing. In fact, the security of their computers seems to be pretty ignored, if you simply analyze the findings of a research conducted by the same security firm. Just listen to this: 4.54 percent of the computers contained no insecure applications, 27.83 percent got 0-5 insecure applicat ... [read more >>] | | 10 January 2008, 06:51GMT | (c) 2008 Softpedia |
| January 2008 Security Releases ISO Image |  | Yes, it's that time of the month again... For Microsoft, January 8th, 2008 was synonymous with the first Patch Tuesday of this year. The Redmond company releases security update for its software products on a monthly basis, and the availability date ... [read more >>] | | 09 January 2008, 07:29GMT | (c) 2008 Softpedia |
| Windows Vista Kernel Can Be Subdued by Malicious TCP/IP Packets |  | In what can only be described as a very slow month for Microsoft, in terms of security bulletins releases, as well as a light start of 2008, the Redmond company has issued a patch for a critical vulnerability impacting Windows Vista. Microsoft Security Bulletin MS08-001, labeled with a maximum severity rating of Cr ... [read more >>] | | 09 January 2008, 05:09GMT | (c) 2008 Softpedia |
| Firefox under Attack, No Solution Available yet! |  | We all know it, Firefox is one of the most popular web browsers ever designed. Moreover, some people say the Mozilla browser is the most secure application in its category, having safer features that Internet Explorer, the program built by the Redmond software giant, Microsoft. However, a new vulnerability has been discovered in Mozilla Firefox and, at the time of writing this article, no official solution has been released. Secu ... [read more >>] | | 04 January 2008, 05:43GMT | (c) 2008 Softpedia |
| An Excellent Debut for Vista in 2008 – the First Critical Vulnerability |  | The first month of 2008 is synonymous with an excellent debut for Windows Vista, as Microsoft is getting ready to resolve the first critical vulnerability affecting the operating system this year. The Redmond company made available this week the Security Bulletin Advance Notification for January 2008, offering a sneak peak at the security bulletins that will be issued on January 8th, 2008. With Vista but a month away from the first anniver ... [read more >>] | | 04 January 2008, 03:37GMT | (c) 2008 Softpedia |
| Who Says Opera Is Secure? |  | I've heard people saying that Opera is one of the most secure browsers ever created, being safer to use than Firefox or Internet Explorer. In fact, every application is quite secure if you install the latest version or you apply the newest patches. And this is Opera's case too, because some security vulnerabilities have been discovered in some older releases that really require the update to the latest version. Security ... [read more >>] | | 03 January 2008, 16:06GMT | (c) 2008 Softpedia |
| Unpatched RealPlayer = Your Worst Nightmare |  | RealPlayer has always managed to remain in the spotlight, but not only with good things as the applications has been often the subject of security advisories published on the web. Today, it’s the time. It’s the time when RealPlayer is once again vulnerable to attacks and it seems like this time, it may be a serious one. Security company Secunia ... [read more >>] | | 03 January 2008, 13:14GMT | (c) 2008 Softpedia |
| One More Christmas Infection Exploiting Windows Vulnerabilities |  | In case you thought you're safe this Christmas because you have applied the latest definitions for your security software, I'm sorry to disappoint you, but you're not safe at all. And a recently-spotted worm comes to support this statement. WORM_DLOADER.TBW is a Windows infection discovered by security company Trend Micro, which affects most versions of the Microsoft operating system including 98, ME, NT, 2000, XP ... [read more >>] | | 27 December 2007, 06:02GMT | (c) 2008 Softpedia |
| Microsoft Patches Internet Explorer Patch |  | Microsoft has patched a patch released for Internet Explorer. It might not sound good, but it's true. And it all began with the Redmond company's monthly patch cycle. On December 11th, 2007, Microsoft made available Security Bulletin MS07-069 Cumulative Security Update for Internet Explorer (942615). As i ... [read more >>] | | 21 December 2007, 03:42GMT | (c) 2008 Softpedia |
| After Google Toolbar, Yahoo Toolbar Bites the Dust too! |  | Following the reports concerning a security flaw in Google Toolbar, a new vulnerability has been disclosed in Yahoo Toolbar, the browser add-on produced by the Sunnyvale company. The YShortcut.dll ActiveX control remote buffer overflow vulnerability affects only the 1.4.1 release of Yahoo Toolbar, but other versions might be vulnerable as well, SecurityFocus wrote in an advisory published today. Since there's no exploitatio ... [read more >>] | | 21 December 2007, 03:21GMT | (c) 2008 Softpedia |
| Yet Another Antivirus Vulnerability. Time to Patch! |  | Everybody trusts antiviruses because they are supposed to assure a smooth system performance and block potential threats that might affect our computer working experience. But all it needs is a security vulnerability and the entire system goes crazy: the antivirus, your friend, turns into your worst enemy, and is able to allow intruders invade your computer and access your private information. I’m not sure if today’s piece of vu ... [read more >>] | | 19 December 2007, 14:06GMT | (c) 2008 Softpedia |
| A Dangerous Triangle: Opera Browser – Adobe Flash Player – Apple Mac OS X |  | So, are you one of those proud Apple customers and are you currently using Mac OS X? Oh, and have you also downloaded Opera Browser to surf the web? Hey, wait a sec, is that Adobe Flash Player installed on your system? Oh my God, you’re vulnerable pal! You should really update your applications! A new vulnerability has been discovered on the computers equipped with Mac OS X running Opera Browser with an installed Adobe Flash Pla ... [read more >>] | | 19 December 2007, 04:51GMT | (c) 2008 Softpedia |
| Voting Systems Vulnerable. How Dangerous Is This? |  | A recent study, released by Ohio's Secretary of State, reveals that the Ohio's electronic voting systems are pretty insecure as they contain several flaws which may have an important impact over the "integrity of elections in the Buckeye State". Jennifer Brunner wrote that the voting technology should be well improved since most of the tests disclosed critical security vulnerabilities. EVEREST (Evaluation &am ... [read more >>] | | 18 December 2007, 15:06GMT | (c) 2008 Softpedia |
| Mail Security Not so Secure |  | A highly critical vulnerability has been discovered in Symantec Mail Security, which may allow an attacker who manages to exploit it to compromise the affected system, Secunia wrote in a security notification rolled out today. The flaw exists in Symantec Mail Security for SMTP version 5.0.1 with Patch 187, but other versions might be affected as well. Symantec Mail Security is a technology powered by the Cupertino company, being ... [read more >>] | | 13 December 2007, 14:06GMT | (c) 2008 Softpedia |
| Download the Windows Security Releases ISO Image |  | Yes, it is that time of the month again for Microsoft. And the Redmond company has ended 2007 with a security run dignified of an apotheosis. On December 11th`, 2007, a date synonymous with Microsoft's Patch Tuesday, the monthly patch cycle brought with it fixes for no less than 11 vulnerabilities. A total of seven security bulletins have been issued this month patching Critical holes in products, such as Windows Vista and ... [read more >>] | | 12 December 2007, 09:45GMT | (c) 2008 Softpedia |
| Think Vista Is Secure? Microsoft Will Prove You Wrong! |  | In the end, beating the old drum of Windows Vista as the most secure Windows operating system on the market, is nothing more than a marketing campaign. Microsoft has constantly been applauding Vista as an apex of security in relation not only to previous Windows releases, but also to rival platforms. But at the same time, while & ... [read more >>] | | 12 December 2007, 07:26GMT | (c) 2008 Softpedia |
| HP Notebook Owners in Danger! Both Windows XP and Windows Vista Affected! |  | This could be only bad news for the HP notebook owners who are using Windows XP Home, Windows XP Pro, Windows 2000, Windows 2003 or Windows Vista: a vulnerability was discovered in HP Info Center, which can be used by an attacker to compromise an affected system or access all sorts of system details, as security company Secunia wro ... [read more >>] | | 12 December 2007, 05:54GMT | (c) 2008 Softpedia |
| All It Takes to Bring IE Down Is a Malformed Web Page |  | In a recent report focused on the volume of vulnerabilities impacting various versions of Internet Explorer and Firefox 2.0, over a period of three years, Microsoft's IE managed to come on top of Mozilla's open source browser. Playing the vulnerabilities counting game, as an indication of the measure of security delivered by the two browsers, Jeff Jones, Security Strategy Director in Microsoft’s Trustworthy Computing group, stres ... [read more >>] | | 12 December 2007, 05:28GMT | (c) 2008 Softpedia |
| Windows Vista-Compatible Antivirus Puts Users at Risk |  | Here's another Windows Vista-compatible antivirus that must be patched as soon as possible to avoid successful exploitations of a recently reported vulnerability. Trend Micro AntiVirus plus AntiSpyware 2008, Trend Micro Internet Security 2008 and Trend Micro Internet Security Pro 2008 are all affected by the uue decoding format string vulnerability, rated by security company Secunia as moderately critical. Trend Micro wrote ... [read more >>] | | 12 December 2007, 04:39GMT | (c) 2008 Softpedia |
| Attackers Can Completely Take Over x64 and x86 Vista Machines via DirectX 10.0 |  | DirectX 10, the graphics technology exclusive to Windows Vista, has been applauded as an apex of the evolution for Windows' DirectX suite of multimedia application programming interfaces, but a critical security vulnerability in the APIs allows a potential attacker to completely take over the computer. Tomorrow, Microsoft will make available (December 11) a patch for DirectX 10 in both 32-bit and 64-bit versions of Vista, p ... [read more >>] | | 10 December 2007, 06:45GMT | (c) 2008 Softpedia |
| Skype 3.6 Almost a 'Must Have' |  | Skype, the popular VoIP client, is again the main subject of today's security news, after Zero Day Initiative reported a new vulnerability in the versions prior to 3.6. Under the 'skype4com URI Handler Heap Corruption Vulnerability', security company Secunia rated the flaw as highly critical and urged the users to update to the latest version of the application in order to avoid potential exploitations of the flaw. ... [read more >>] | | 07 December 2007, 03:28GMT | (c) 2008 Softpedia |
| Opera Browser in Danger, No Patch Available Yet |  | Opera Browser has always been an alternative for the top players Firefox and Internet Explorer, so we all expect a very powerful solution that would be able to compete with the two giants. However, Opera, which I must admit is one of my favorite browsers, contains some security flaws that could put the users at risk, SecurityFocus reported today. At this time, Opera Software didn't release a patch to correct the vulnerabili ... [read more >>] | | 06 December 2007, 03:01GMT | (c) 2008 Softpedia |
| Is the “Vulnerability Tax” the Key to 100 Percent Protected Users? |  | We all know that a single vulnerability discovered in one of the applications installed on the computer can allow a potential hacker to obtain full control over our system. The software companies cannot be blamed for these holes, as they usually patch them pretty fast, but is there any chance to use a 100 percent secure application that wouldn't put the users at risk? David Rice, director of the Monterey Group, thinks it may ... [read more >>] | | 05 December 2007, 15:31GMT | (c) 2008 Softpedia |
| Vulnerable Antivirus Anyone? |  | We all love free goodies and if the freeware license comes with an antivirus technology, it's a dream coming true. Avast Antivirus is probably one of the best alternatives for the traditional and expensive antivirus solutions, because it is available for free for all the users. An old quote says that if you want high quality, you have to pay for it. Although Avast is famous for its pretty amazing security features, a securit ... [read more >>] | | 05 December 2007, 06:30GMT | (c) 2008 Softpedia |
| Hey, OpenOffice Users, Update Your Application NOW! |  | OpenOffice has always been regarded as the perfect solution for Microsoft Office, a more expensive solution powered by the Redmond-based company. Since it has been available for free for all Windows, Mac, and Linux users, OpenOffice is installed on millions of computers from all over the world. But, this impressive popularity doesn't necessarily mean that the Office suite is also 100 percent secure. This is why security comp ... [read more >>] | | 05 December 2007, 05:53GMT | (c) 2008 Softpedia |
| IE7 Proxy Settings in 32-bit and 64-bit Windows Vista Offer an Open Avenue for Attacks |  | Internet Explorer 7, the browser version that ships by default as a component of both 32-bit and 64-bit Windows Vista operating system, can serve as an open avenue for attacks, provided that the necessary proxy settings are in place. Microsoft issued a security advisory, confirming the existence of a vulnerability in Web Proxy Auto-Discovery (WPAD). In the eventuality of a successful exploit, the attacks could lead to informatio ... [read more >>] | | 04 December 2007, 05:11GMT | (c) 2008 Softpedia |
| Skype 3.6.0.216 for Microsoft Windows Is Vulnerable |  | Skype users are again threatened by a vulnerability discovered in the VoIP software solution; SecurityFocus reported that only the 3.6.0.216 version is affected. However, some other releases might be affected by the same flaw, but there's no successful exploitation reported, yet. The developer of the application didn't roll out any patch to correct the vulnerability, so we're expecting it in the next few days. Acco ... [read more >>] | | 28 November 2007, 06:43GMT | (c) 2008 Softpedia |
| Five-Year-Old Windows Design Flaw Comes Back to Haunt Vista |  | Windows Vista, Microsoft's latest operating system, has been continually applauded as an apex of security and an epitome of user protection when it comes down to the Windows platforms available on the market. Yet Vista is far from being bulletproof despite the additional security mitigations built into the product from User Account Control to Address Space Layout Randomization. And although Vista is the first product to come out of th ... [read more >>] | | 27 November 2007, 05:20GMT | (c) 2008 Softpedia |
| The Truth About Dangerous Antiviruses |  | We all knew that a powerful antivirus supposed to block threats and protect your computer can turn into a serious danger for your computer due to several reasons. But as Sergio Alvarez and Thierry Zoller, N.runs security researchers, stated, the vulnerabilities discovered in the antivirus technologies can be easily used by hackers to exploit an affected system. SecurityFocus informed that the two security experts discovered no less than &q ... [read more >>] | | 26 November 2007, 02:25GMT | (c) 2008 Softpedia |
| Download Microsoft Security Releases ISO Image - November 2007 |  | In terms of serving security updates, Microsoft uses a strategy involving monthly releases of update bulletins. The Patch Tuesday tradition has been adopted as a natural consequence of user feedback that required the company to adopt a fixed timetable for security releases, enabling superior management of the deployment of updates. Patch Tuesday is synonymous with the date when security bulletins are made available, generally the second Tu ... [read more >>] | | 21 November 2007, 04:48GMT | (c) 2008 Softpedia |
| New Virus Takes Advantage of Windows Vulnerabilities |  | I told you it’s better to keep your Windows up-to-date with the latest fixes because you can avoid several problems but this time, it’s pretty necessary to do so. Security vendor Trend Micro released a notification concerning WORM_JALOUS.AI, a new threat targeting the Windows computers and especially the vulnerabilities found in the Microsoft operating system. The security company confirmed the infection targets Windows 98, ME, N ... [read more >>] | | 19 November 2007, 08:32GMT | (c) 2008 Softpedia |
| Got Money? Then You Can Protect Your Linux Computer! |  | Do you remember WabiSabiLabi, that online shop for software vulnerabilities? If the answer is yes, you should know the service is back and along with some new goodies especially for the Linux lovers. WabiSabiLabi is now attempting to sell a ClamAV software vulnerability for no less than 500 euro. Sure, it’s only intended to be delivered to the security companies which would be able to work for a resolution on it and work with the ... [read more >>] | | 19 November 2007, 04:25GMT | (c) 2008 Softpedia |
| Not a Single Scratch on Vista, as Microsoft Patches XP and Windows Server 2003 |  | As Microsoft is hard at work patching Windows XP and Windows Server 2003, Windows Vista managed to get by without a single scratch. On November 13, the Redmond company made available two security bulletins addressing vulnerabilities in XP and Windows Server 2003. The updates are designed to patch two security holes rated as Critical and Important, respectively, by Microsoft, with the maximum severity flaw having been actively exp ... [read more >>] | | 14 November 2007, 03:09GMT | (c) 2008 Softpedia |
| And Here's Mozilla Firefox Making Users Vulnerable to Hackers |  | Mozilla Firefox is again the main subject of the security advisories as a new vulnerability was discovered which doesn't seem to affect the latest 2.0.0.9 release. According to a report published by Security Focus, Mozilla Firefox is affected by a Jar URI cross-site scripting vulnerability discovered in all the browser versions prior to 2.0.0.9. A few days ago, the Firefox developer published a new release of the application ... [read more >>] | | 09 November 2007, 05:34GMT | (c) 2008 Softpedia |
| ACDSee Must Be Updated! Now! |  | ACDSee is a famous suite of photo manipulation utilities which are currently installed on numerous computers all over the world. But the subject of this piece of news is not the pack itself but some vulnerabilities which were discovered and reported by security company Secunia today. In fact, ACDSee acknowledged the flaws and already issued a fix to patch them. According to Secunia, the affected software solutions are ACDSee Phot ... [read more >>] | | 07 November 2007, 11:42GMT | (c) 2008 Softpedia |
| Vista Still Breathing as XP Chokes on Latest Vulnerability |  | Windows Vista is still breathing as Windows XP is now choking on the latest vulnerability to hit Microsoft's platform. The Redmond company issued a security advisory detailing a flaw residing in the Macrovision SECDRV.SYS driver that ships by default with both Windows XP and Windows Server 2003. Vista was not nominated along with the two operating systems impacted by the vulnerability and security company Symantec backed Microsoft ... [read more >>] | | 07 November 2007, 09:57GMT | (c) 2008 Softpedia |
| What Is the Fastest Way to Windows' Heart? |  | What is the fastest way to Windows' heart? Well, take your pick. The Windows operating system is hardly bulletproofed. This although Microsoft has the largest degree of control over the end result of its own development process. But on top of the operating system and the native components that ship by default with the product, additional items intermingling with the platform's fabric situate themselves outside the Redmond company ... [read more >>] | | 06 November 2007, 03:00GMT | (c) 2008 Softpedia |
| Top 10 Absolute Worst Windows Applications in 2007 |  | Think Windows Vista is bad? Well, the fact of the matter is that is largely a subjective perspective that is little open to dispute. However, when it comes down to what users can integrate with the operating system, the situation is a tad more severe. Security company Bit9 compiled a list with the top 10 absolute wo ... [read more >>] | | 05 November 2007, 11:13GMT | (c) 2008 Softpedia |
| A Not-So-Safe-Email with Symantec Mail Security |  | Symantec Mail Security is a suite of utilities designed to protect your inbox from all kinds of threats no matter if you're based on Microsoft Exchange, SMTP or Domino. Although the products are designed to defend your email, the Symantec Mail Security solutions are unable to reach their goal due to multiple vulnerabilities in the Autonomy KeyView module.
According to a security notification from Symantec, the affected p ... [read more >>] | | 05 November 2007, 03:07GMT | (c) 2008 Softpedia |
| Symantec Mail Security Not So Secure |  | Symantec Mail Security for SMTP is a technology designed by the famous company Symantec which is supposed to protect users' accounts from several types of web threats. Although the application has this clear goal, it seems like it might fail in its attempt to defend the users due to several vulnerabilities reported by security company Secunia and rated as highly critical. Secunia didn't mention how many security flaws w ... [read more >>] | | 26 October 2007, 09:32GMT | (c) 2008 Softpedia |
| Real News: RealPlayer Harmed by Real Flaw! |  | RealPlayer is the latest software affected by a critical vulnerability, a successful exploitation being able to give the attackers the possibility to control an affected system. According to the French Security Incident Response Team, this flaw was discovered on June 26, 2006 when it only affected RealPlayer 10.x but the reports are again brought in the spotlights due to new affected flavors of the application. According to Info ... [read more >>] | | 19 October 2007, 06:38GMT | (c) 2008 Softpedia |
| Opera Browser Vulnerable, Update Recommended! |  | Opera browser has always been one of the applications described as an alternative for the giants Internet Explorer and Firefox but in the recent period, it has grown up a lot and has become more popular among the Internet consumers. Moreover, together with Safari and other programs, Opera started challenging the two leaders, becoming one of the top players on the market. Because I'm sure many of you are using Opera, you shou ... [read more >>] | | 18 October 2007, 05:19GMT | (c) 2008 Softpedia |
| Bulletproof Internet Explorer 7 Against URL Attacks |  | Microsoft has acknowledged scenarios where Internet Explorer 7 – running on top of Windows XP SP2, Windows XP Professional x64 and with SP2, as well as Windows Server 2003, the 32-bit and the 64-bit editions, both SP1 and SP2, along with Windows Server 2003 with SP1 or SP1 for Itanium-based Systems – provides fertile soil for a remote execution vulnerability. The exploits have been confirmed as being connected to an ... [read more >>] | | 17 October 2007, 08:29GMT | (c) 2008 Softpedia |
| Word Crashes, Viruses Land |  | I guess some of you are sick of just reading "do this, patch that to stay secure" with explanations written in such a techie language that you do not understand a thing. Well, I’m now going to explain nice and simple why it’s important to patch Microsoft products.
If you’ve read the recent news or have been simply paying attention to what your computer is prompting you (if you have Windows on it, that is), then you ... [read more >>] | | 12 October 2007, 03:12GMT | (c) 2008 Softpedia |
|
