DMANd Security

Another Windows Security Alert

Joe Lofshult — Mon, 14 Jun 2010 19:37:31 +0000

Brian Krebs posted an article today about a new security alert for Windows XP Users. The vulnerability is exploited by getting users to click on a specially crafted link. So, like I’ve written before, don’t click on links from people you don’t know and be careful when visiting unfamiliar web sites.

Microsoft does not have a patch for this issue yet, but does offer workarounds in their Security Advisory.

Adobe Security Alert Adobe issued a security advisory for their Flash Player,...

Related posts brought to you by Yet Another Related Posts Plugin.

Adobe Fixes Critical Security Holes

Joe Lofshult — Fri, 11 Jun 2010 15:30:14 +0000

Adobe has released a new version of Flash Player. From their security bulletin:

Critical vulnerabilities have been identified in Adobe Flash Player version 10.0.45.2 and earlier. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system.Adobe recommends users of Adobe Flash Player 10.0.45.2 and earlier versions update to Adobe Flash Player 10.1.53.64. Adobe recommends users of Adobe AIR 1.5.3.9130 and earlier versions update to Adobe AIR 2.0.2.12610.

Brian Krebs has a nice writeup on this fix here.

Adobe Security Alert Adobe issued a security advisory for their Flash Player,...
Microsoft and Apple Release Major Security Updates Microsoft released their monthly patch bundle today. Make sure...

Related posts brought to you by Yet Another Related Posts Plugin.

Microsoft and Apple Release Major Security Updates

Joe Lofshult — Wed, 09 Jun 2010 04:14:10 +0000

Microsoft released their monthly patch bundle today. Make sure you update your system with Windows Update. Here’s a good write up on the patches. Apple also shipped updated software.

In its largest patch push so far this year, Microsoft today released 10 security updates to fix at least 34 security vulnerabilities in its Windows operating system and software designed to run on top of it. Separately, Apple has shipped another version of Safari for bothMac and Windows PCs that plugs some four dozen security holes in the Web browser.

Adobe Security Alert Adobe issued a security advisory for their Flash Player,...
New Microsoft Ad The new Microsoft ad is a good demonstration of...

Related posts brought to you by Yet Another Related Posts Plugin.

New Microsoft Ad

Joe Lofshult — Wed, 09 Jun 2010 03:55:00 +0000

The new Microsoft ad is a good demonstration of social engineering.

The message is that the same types of scams happen online and IE8 can protect you from bad guys while you browse. The fake bank experiment highlights just how gullible we can be when the promise of money is dangled in our face, and may scare viewers into choosing IE8. Look for more ads of this variety to be released in the coming weeks.

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

Adobe Security Alert

Joe Lofshult — Tue, 08 Jun 2010 12:16:41 +0000

Adobe issued a security advisory for their Flash Player, Acrobat Reader, and Acrobat. The vulnerability is currently being exploited on the Internet. From the advisory:

A critical vulnerability exists in Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh and UNIX operating systems. This vulnerability (CVE-2010-1297) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat.

You can check your version of Flash Player here.

While Adobe doesn’t have a patch yet, they do have a release candidate version (all the bugs haven’t necessarily been worked out) of the Flash Player available that is not vulnerable to the exploit.

And if you use the Firefox browser, you should install the FlashBlock add-on.

If you’re using Adobe Reader 9.x, you can either delete the file authplay.dll file or use an alternative PDF file viewer like Foxit Reader.

Instructions for deleting the authplay.dll, as provided by Adobe:

Deleting, renaming, or removing access to the authplay.dll file that ships with Adobe Reader 9.x and Acrobat 9.x mitigates the threat for those products, but users will experience a non-exploitable crash or error message when opening a PDF file that contains SWF content.

The authplay.dll that ships with Adobe Reader 9.x and Acrobat 9.x for Windows is typically located at C:\Program Files\Adobe\Reader 9.0\Reader\authplay.dll for Adobe Reader or C:\Program Files\Adobe\Acrobat 9.0\Acrobat\authplay.dll for Acrobat.

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.