BuyLow.com Computers And Internet - Internet Security, Computers, Mobile Devices, Networks

BuyLow.com | Resources | Contact Us


 

Tag Cloud

alert Apple attacks computer computers computer security cyber crime email Facebook Firefox fraud Google government hackers identity theft id theft infringement Internet Internet Explorer internet security Java Mac malware Microsoft mobile devices mobile phones networks patents phishing privacy Safari safety scams security servers spammers technology viruses web browser web browsers websites Windows Word worm www

Archives

  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • October 2009
  • September 2009
  • August 2009
  • July 2009
  • June 2009
  • May 2009
  • April 2009
  • March 2009
  • February 2009
  • January 2009

    • Apple QuickTime Updates for Multiple Vulnerabilities

    National Cyber Alert System
    Technical Cyber Security Alert TA09-022A
    Apple QuickTime Updates for Multiple Vulnerabilities
    Original release date: January 22, 2009
    Source: US-CERT

    Systems Affected
    Apple QuickTime 7.5 for Windows and Mac OS X

    Overview
    Apple has released QuickTime 7.6 to correct multiple vulnerabilities affecting QuickTime for Mac OS X and Windows. Attackers may be able to exploit these vulnerabilities to execute arbitrary code or cause a denial of service.

    I. Description
    Apple QuickTime 7.6 addresses a number of vulnerabilities affecting QuickTime. An attacker could exploit these vulnerabilities by convincing a user to access a specially crafted media or movie file. This file could be hosted on a web page or sent via email.

    II. Impact
    The impacts of these vulnerabilities vary. Potential consequences include arbitrary code execution and denial of service.

    III. Solution
    Upgrade to QuickTime 7.6. This and other updates are available via Software Update or via Apple Downloads.

    Comments are closed.

    Tags: , , ,
    Category: Uncategorized

    RSS BugTraq

    • [SECURITY] [DSA 2100-1] New openssl packages fix double free
      Posted by Moritz Muehlenhoff on Aug 30------------------------------------------------------------------------ Debian Security Advisory DSA-2100-1 security () debian org http://www.debian.org/security/ Moritz Muehlenhoff August 30, 2010 http://www.debian.org/security/faq ------------------------------------------------------------------------ Package : opens […]
    • Re: [Full-disclosure] QtWeb Browser version 3.3 build 043 Insecure DLL Hijacking Vulnerability (wintab32.dll)
      Posted by security curmudgeon on Aug 30: 1. OVERVIEW : : The QtWeb Browser application is vulnerable to Insecure DLL Hijacking : Vulnerability. Similar terms that describe this vulnerability have been : come up with Remote Binary Planting, and Insecure DLL : Loading/Injection/Hijacking/Preloading. : 3. VULNERABILITY DESCRIPTION : : The QtWeb Browser applicat […]
    • [ MDVSA-2010:165 ] libHX
      Posted by security on Aug 30 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:165 http://www.mandriva.com/security/ _______________________________________________________________________ Package : libHX Date : August 30, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1 _________________________ […]
    • {Lostmon - Groups} Safari for windows Invalid SGV text style Webkit.dll DoS
      Posted by Lostmon lords on Aug 30################################################### Safari for windows Invalid SGV text style Webkit.dll DoS Vendor URL:www.apple.com Advisore:http://lostmon.blogspot.com/2010/08/safari-for-windows-invalid-sgv-text.html Vendor notify :Yes exploit available :YES ################################################### Safari browse […]
    • R7-0036: FCKEditor.NET File Upload Code Execution
      Posted by HD Moore on Aug 30R7-0036: FCKEditor.NET File Upload Code Execution August 30, 2010 -- Vulnerability Details: FCKEditor contains a file renaming bug that allows remote code execution. Specifically, it is possible to upload ASP code via the ASP.NET connector  in FCKEditor. The vulnerability requires that the remote server be running IIS. This vulne […]