- BlackBerry Storm vs. the iPhone
- Digg's Kevin Rose: "We have to do better"
- Blogger warns: "Nortel doesn't make it out alive"
- Financial quagmire bringing out the scammers
- Verizon plays with the wrong e-mail addresses
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:Application Performance Solutions | App Performance | Networking Solution | SafeGuard Enterprise Solution Center | SOA | Test your Web Filter | Value of WDS
Jason Meserve provides up-to-the-minute news on vendor security alerts and fixes.
Microsoft patches 10 bugs in Windows, IE and Bluetooth
Microsoft Tuesday patched 10 vulnerabilities, four marked "critical," in Windows and Internet Explorer (IE), and disabled
a little-known third-party ActiveX control bundled with Logitech hardware, including keyboards and mice. The one that caught
the eyes of most analysts was MS09-030 , a critical update that patches a single bug in Windows' implementation of Bluetooth.
Computerworld, 06/10/2008.
US-CERT advisory
**********
New version of OpenOffice.org fixes critical bug
OpenOffice.org has issued a patch for a security vulnerability affecting several versions of its open-source office suite.
The vulnerability is a memory problem called a heap overflow, OpenOffice.org said in an advisory. IDG News Service, 06/11/2008.
Version information for new update
**********
Apple releases QuickTime 7.5 with bug fixes
Apple has again released a new version of QuickTime, its multimedia player that has been plagued by software vulnerabilities.
The latest version, 7.5, repairs five vulnerabilities, all of which could result in a hacker taking control over a person's
PC. Four out of the five problems affect both Apple's OS X and Microsoft's XP and Vista operating systems. IDG News Service,
06/10/2008.
US-CERT advisory
**********
US-CERT warns of SNMPv3 vulnerability
A flaw in many implementations of SNMPv3 could be exploited to bypass the authentication mechanism of affected systems. Simply
put, attackers could read SNMP packets to find system credentials, then used forged packets to gain access to the system.
US-CERT is urging users to check with their vendors for an update.
Cisco's update is available here
**********
Two new updates from Mandriva
Firefox (multiple flaws)
**********
Today's malware news:
Safari 'carpet bomb' attack code released
A hacker has posted attack code that exploits critical flaws in the Safari and Internet Explorer Web browsers. IDG News Service,
06/10/2008.
**********
From the interesting reading department:
U.S. Congressmen accuse China of hacking their computers
Two U.S. Congressmen on Wednesday accused China of hacking their office computers, possibly compromising information on Chinese
dissidents, the Congressmen and news reports said. IDG News Service, 06/12/2008.
Jason Meserve is multimedia editor at Network World.
| NetworkWorld, Inc. | About Network World, Inc. | Advertise | Careers | Contact us | Terms of Service/Privacy | Reprints and links | Partnerships | Press room | Subscribe to NW |
| IDG, Inc. | CIO | Computerworld | CSO | Demo | GamePro | Games.net | IDGconnect.com | IDG World Expo | Infoworld | JavaWorld.com | LinuxWorld.com | MacUser | Macworld | PC World | Playlistmag.com | The Industry Standard | IDG List Services | IDG TechNetwork |
 |
Copyright © 1994-2008 Network World, Inc. All rights reserved. |
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment