A critical hole in Adobe products

A critical vulnerability has been found out in Adobe Acrobat and Adobe Reader, the patch for which does not exist now.

As it is informed, the problem is related to processing of JavaScript code. With help of the document generated in special way malefactors theoretically can organise DoS-attack, provoke emergency end of work of the program or execute any operations on the remote computer.
Read the rest of this entry »

Security patches for Adobe Flash Player

Adobe Systems has released the updated version of a flash-player for Windows, Mac OS X and Linux operating systems.

Several vulnerabilities of Flash Player v.10.0.22.87,  which can be used by malefactors for the purpose of control capture over the computer of a victim, are removed. They could be also used for organisations of DoS-attacks and so forth the Greatest danger are represented by the hole  connected with the buffer overflow error: by means of the file generated in special way in format SWF (Shockwave Flash) cybercriminals could execute  any program code with privileges of the current user on the remote computer.
Read the rest of this entry »

Security hole in recent versions of Microsoft Excel

Experts in security issues from Symantec company warn about presence of dangerous vulnerability in Microsoft Excel of recent versions, the patch for which does not exist now.

Detected “hole” theoretically allows malefactors to receive unauthorized access to the computer of a victim and to execute any harmful code on it . For the organisation of the attack it is necessary to force user to open the document generated in special way in .xls format. Such file, for example, can be placed on web page or sent by e-mail.
Read the rest of this entry »

Dangerous vulnerability in Adobe products

Experts from the several companies specialising on questions of computer security, warn about frequent cases of attacks through a “hole” in software products of Adobe Systems.

The vulnerability theoretically allows to take a complete control over the computer of a victim. For attack implementation it is necessary to force user to open the file generated in special way created with application of the standard of compression JBIG.
Read the rest of this entry »

Internet Explorer 7 is under attack again

Computer security experts from Trend Micro warn about a new wave of the hacker’s attacks aimed at Microsoft Internet Explorer 7 users.

As it is informed, this time cybercriminals maintain a security hole in the seventh version IE a patch for which corporation Microsoft has let out last week. The problem is related to an error arising in a browser at attempt of access to earlier remote objects. “Hole” theoretically allows malefactors to grasp a complete control over the personal computer of a victim.

Read the rest of this entry »

Windows 7 UAC vulnerability

The release of Windows Vista has brought the new possibility intended for security of the computer – the User Account Control (UAC). However so useful possibility became at first the excellent reason of criticism to the operating system that has been linked to huge number of the warning diagnostics, which many users have considered irritating and simply disabled.

However the reduced number of messages from UAC in Windows 7 as it has appeared, still is not an advantage at all. In Windows 7 Microsoft has decided to change the policy and already in beta-versions of the future operating system began to offer less irritating UAC. Now it can receive an absolutely return estimation since blogger Long Zheng (Long Zheng), the leader of blog Start Something, has in details described the concept of attack against new UAC in Windows 7.
Read the rest of this entry »

Microsoft has prepared a new portion of patches

As it is informed in the prior notification, all four security bulletins with the description of “holes” in browser Internet Explorer, a control system of databases SQL Server, post server Exchange and package Visio which is a part of a set of office applications Microsoft Office will be published.

Read the rest of this entry »

The critical error in Microsoft Word

Microsoft company has warned about presence of critical vulnerability in the Microsoft Word, which can lead to attacks of hackers to computers of users. Representatives of Microsoft are engaged in research of the given problem and will release official correction with regular monthly upgrade.

The software giant has confirmed vulnerability presence about which the contributor of anti-virus company Panda Izmael Briones (Ismael Briones earlier has written). According to its report, vulnerability, basically, is in “engine” of Microsoft Jet Database Engine which is used by many professional program applications, as Access and Visual Basic.

Read the rest of this entry »

Microsoft has patched next critical hole in Windows

The next portion of  patches for the software products was released past Tuesday by Microsoft corporation.
This time within the limits of monthly updating the company has published only one security bulletin . It contains the description of three “holes” in realisation of report Server Message Block of operating systems Windows of various versions, including Windows 2000, XP, Vista, Server 2003 and Server 2008.

According to Microsoft classification , vulnerability is characterised critically dangerous and, hence, can be maintained by malefactors for the purpose of reception of unapproved access to the remote computer and the subsequent performance on it of any program code. For organisation of the attack it is necessary to send the package of the data generated in special way on the computer of a victim.

Together with patches Microsoft has released the updated version of Windows Malicious Software Removal Tool intended for search of the most widespread harmful programs. The patches are available for download through Microsoft Update, Windows Update, and also it is direct from a official website.

Vulnerability in Gmail can help with theft of domains

Recently in the Internet there was an information that vulnerability in Gmail service which was considered for a long time already eliminated, actually is not eliminated completely. Therefore your account can become a potential victim of theft and harmful attacks. About presence of this vulnerability it became known in December, 2007 when David Airey has suffered from theft of his own web site. Later Google has declared that the problem has been solved, however, seemingly, it still exists. Problems begin when you enter into your Gmail account and then visit a harmful web site. It is not important, whether you click on the link from the account or not, the harmful site in any case is capable to get access to your internal “identification cards”.

Read the rest of this entry »