The latest versions of Internet Explorer and Firefox on Windows and (in the case of Firefox) Unix systems are vulnerable to attacks that could reveal the contents of sensitive files residing on a victim's hard drives.
Apple patches security flaw in QuickTime
Apple Inc. has patched a vulnerability in its QuickTime media player that could give a hacker control over a computer.
The problem concerns a buffer overflow that can occur when QuickTime processes a RTSP URL (Real Time Streaming Protocol Uniform Resource Locator), which directs the player to a streaming file and allows a user to play and pause it. A hacker could create a malicious RTSP URL embedded in a Web page that would could open a door for other harmful code to run on a machine, Apple said. The patch comes more than three weeks after researchers who are part of the Month of Apple Bugs (MOAB) project published exploit code. Infosworld has more on this topic.
The problem concerns a buffer overflow that can occur when QuickTime processes a RTSP URL (Real Time Streaming Protocol Uniform Resource Locator), which directs the player to a streaming file and allows a user to play and pause it. A hacker could create a malicious RTSP URL embedded in a Web page that would could open a door for other harmful code to run on a machine, Apple said. The patch comes more than three weeks after researchers who are part of the Month of Apple Bugs (MOAB) project published exploit code. Infosworld has more on this topic.
Storm Worm spreads fast
Finish data security company F-Secure told reporters today that a computer virus called "Storm Worm" was sent to hundreds of thousands of email addresses globally. Knowing how many e-mail users do not blind-copy (BCC) their friends when sending mass e-mails, the numbers could be much higher. According to F-Secure, "Storm Worm" is spreading very quickly. Read on at DailyTech
View Video of the last 24 hours of Virus spreading @ YouTube
View Video of the last 24 hours of Virus spreading @ YouTube
Adobe tackles risky holes in Acrobat, Reader
Adobe Systems has issued updates to fix security flaws in its Reader and Acrobat software that could allow an attacker to remotely commandeer a computer. The vulnerabilities affect Adobe Reader and Adobe Acrobat Standard, Professional and Elements versions 7.0.8 and earlier, as well as Adobe Acrobat 3D, Adobe said in its advisory. Secunia rated the Reader flaw as "highly critical." Read on at ZdNet
Norton AntiVirus 2007 Beta - under Vista x64
Symantec's Norton AntiVirus 2007 is the world's most trusted antivirus solution. It removes viruses and security risks automatically; heuristically detects Spyware threats, detects blocks Internet worm attacks, and protects email.
Start64!
Start64!
VLC Media Player Bug Bites at Apple
The second flaw warning in the Month of Apple Bugs project is for a remote code execution issue affecting the cross-platform VLC media player distributed by VideoLAN.
eWeek
eWeek
Critical Bug In Legacy Windows Media Players
A vulnerability in Media Player 9 and 10 can be used by attackers to grab control of a PC, security researchers warned. A malicious .asx-formatted playlist, if opened by an unsuspecting user, could completely compromise the machine.
TechWeb
TechWeb
Sophos Anti-Virus version 6.5 - under x64
Sophos is providing support for Microsoft Windows Vista with an updated version of Sophos Anti-Virus; Sophos Anti-Virus version 6.5, available for both Sophos enterprise solutions and Sophos small business solutions. This includes our integrated Host Intrusion Prevention (HIPS) technology: Behavioral Genotype and supports both 32- and 64-bit versions of Vista.
Start64!
Start64!
Norton Internet Security 2007 Beta - under Vista 64-bit
With Norton Internet Security, you will be able to enjoy your computer with confidence, knowing that viruses and spyware will be either blocked or removed. All kinds of malicious programs will be removed automatically, including the damaging side effects.
Start64!
Start64!
Firefox, IE vulnerable to fake login pages?
Mozilla's Firefox 2 and Microsoft's Internet Explorer 7 are vulnerable to a flaw that could allow attackers to steal passwords.
C]net
C]net
Kaspersky Internet Security 6.0.1.411 - under x64
Maintenance Pack 1 for Kaspersky Internet Security (KIS) 6.0 includes not only fixes for the main errors identified during the first six months since the product?s official release, but also a number of new features and improvements, which will be described in this overview.
Start64!
Start64!
NOD32 for Windows 2.70.16 - Vista x64 ready
Users of Microsoft Windows can experience the power and elegance of NOD32's ThreatSense Technology with ease and comfort. Our single optimized engine offers the best protection from viruses, spyware, rootkits, adware, phishing attacks, and more. has the smallest footprint and fastest performance - bar none.
Start64!
Start64!
NOD32 v2.7 Release Candidate 1 - under x64
NOD32 v2.7 Release Candidate 1 (v2.70.12) has been released on November 8. Screenshots under Windows XP Pro x64 and Windows Vista 64bit
Start64!
Start64!
Windows XP Exploit Shuts Off Windows Firewall
Detailed exploit code for a Windows XP security vulnerability has been published on the Internet, offering a roadmap for hackers to disable the firewall embedded in the operating system.
eWEEK
eWEEK
AVG Internet Security 7.5 under x64
Complete security protection against all of the most serious Internet threats, including viruses, worms, trojans, spyware, adware, hackers and spam. Platforms: Windows 98, Windows Me, Windows NT, Windows 2000, Windows XP, Windows XP Pro x64 Edition, Windows Vista
Start64!
Start64!
AVG Anti-Virus Professional Edition 7.5 under x64
Security protection against viruses, worms, trojans and potentially unwanted programs. Platforms: Windows 98, Windows Me, Windows NT, Windows 2000, Windows XP, Windows XP Pro x64 Edition, Windows Vista
Start64
Start64
Outpost Firewall PRO 4.0 - 32 and 64-bit
Outpost Firewall Pro 4.0 brings you the ultimate in electronic information protection. With Outpost 4.0, you get the highest level of proactive protection against Internet-borne spyware, keyloggers, Trojans and other unauthorized attempts to access the data on your PC - even if you're running 64-bit Windows.
Start64
Start64
Vulnerability in Vector Markup Language Could Allow Remote Code Execution
A team of security gurus today released an unofficial security fix for a serious flaw in Microsoft's default Web browser and e-mail software. The action comes as computer security organizations in the United States and elsewhere are issue alarms that the Internet Explorer flaw is currently being exploited by online criminals to install spyware on vulnerable computers.
Washington Post
Washington Post
Grisoft AVG Free Edition Antivirus: Never Pay for another Antivirus Again
What if I told you that there was a free option on the internet that has all the benefits of a good antivirus without the performance decrease, and unlimited updates for one small price. How affordable is this small price? Well, think as affordable as you can possibly get. That's right, it is free.
TweakNews.net
TweakNews.net
Kaspersky Internet Security under x64
We are glad to have received another invitation to test a program. This time we have the opportunity to test the new Kaspersky Internet Security software under x64, which we are glad to carry out. Our tests are primarily concerned with compatibility.
Start64
Start64