Urgent security update for TeamViewer

h-online: The TeamViewer developers have released updates for a potential security vulnerability discovered in the remote access tool. The company recommends that users install the security updates immediately. Versions 5 to 7 of the Windows, Mac OS X and Linux editions of TeamViewer Full and TeamViewer QuickSupport are affected. The flaw does not appear to have been discovered in TeamViewer Host. The company has not offered any details of the vulnerability, but updated editions of the software can be obtained from the TeamViewer Download page....

July 21, 2012 路 1 min 路 97 words 路 Omid Farhang

Firefox, Thunderbird, Panda and more updates

Mozilla Firefox: Mozilla has released a new update for Firefox, Mozilla Firefox 14.0.1, This version comes with Google Secure search by default, flat buttons in toolbar and some Performance improvement and security fixes. Read more in Mozilla Blog. Mozilla Thunderbird: Mozilla also updated Thunderbird, Mozilla Thunderbird 14, This version mostly focus on stability, performance and security fixes. I think we cannot expect much more new feature in Thunderbird anymore, Mozilla has announced that they changed the way they develop Thunderbird, Read it yourself in Mozilla Blog....

July 17, 2012 路 1 min 路 191 words 路 Omid Farhang

Chrome 20 update fixes high-risk security vulnerabilities

Google has published a new update to the stable 20.x branch of Chrome to close a number of security holes in the WebKit-based web browser. Version 20.0.1132.57 of Chrome addresses a total of three vulnerabilities, all of which are rated as 鈥渉igh severity鈥 by the company. These include two use-after-free errors in counter handling and in layout height tracking that were discovered by a security researcher by the name of 鈥渕iaubiz鈥....

July 13, 2012 路 2 min 路 264 words 路 Omid Farhang

Third edition of vulnerability spotter Secunia PSI

Version 3 of Personal Software Inspector (PSI), Secunia鈥榮 free program updater, has been released with a much simplified user interface, enabling less technically astute users to keep their Windows applications up to date as well. According to Secunia, the automatic updater has also been enhanced. PSI is now able to keep programs from more than 3,000 companies up to date, though, as before, PSI only cares about updates which fix security vulnerabilities....

June 29, 2012 路 1 min 路 176 words 路 Omid Farhang

WordPress 3.4 update closes important security hole

The WordPress developers have released version 3.4.1 of their popular open source publishing platform, fixing a number of bugs and closing security holes, one of which is rated as important. WordPress 3.4, which has already been downloaded 3 million times since being released two weeks ago, contains a important privilege escalation flaw that accidentally allowed all administrators and editors on multi-site installations to use unfiltered_html. This could have been exploited by users for cross-site scripting (XSS) attacks by, for example, publishing posts containing malicious code....

June 29, 2012 路 2 min 路 279 words 路 Omid Farhang

Chrome 20 closes 23 security holes

Google has closed a total of 23 vulnerabilities with the release of Chrome 20. Of those vulnerabilities, 14 are rated critical, enabling attackers to execute code in the browser鈥檚 sandbox, among other things. Integer overflow vulnerabilities in the code for processing PDF files and Matroska containers (.mkv) have also been fixed. Chrome 20 also includes the latest version of Adobe鈥檚 Flash Player on Linux, using the new cross-platform Pepper API. In testing at The H, it was confirmed that the Flash Player support also works on 64-bit Linux systems....

June 27, 2012 路 1 min 路 203 words 路 Omid Farhang

Update for Windows Update has teething troubles

Microsoft has released an unscheduled, non-patch day update for Windows to update the Windows Update function itself. However, according to reports from readers, the Windows Update Agent update does not always run smoothly; The H鈥檚 associates at heise Security also ran into problems on their test systems. A staggered dissemination of the update has been taking place over the past three to four days. Users who run Windows Update are confronted with a message which says that an update for Windows Update needs to be installed before the system can check for other updates....

June 25, 2012 路 1 min 路 198 words 路 Omid Farhang

Adobe updates Flash Player 11.3 to fix Firefox crashing problem

Adobe has released an updated version of its proprietary Flash Player 11.3 plugin to address a bug that caused Firefox 13 on Windows to crash for some users. The problem is believed to have been related to the recently introduced Protected Mode for the Windows version of Flash Player and the open source web browser; the new mode is designed to isolate the plugin from the rest of the system by running it in its own sandbox....

June 23, 2012 路 1 min 路 175 words 路 Omid Farhang

Critical vulnerabilities closed by Winamp update

With the release of version 5.63 of Winamp, Nullsoft, a division of AOL Music, has eliminated four critical security vulnerabilities in the media player. Three of these were heap-based buffer overflows in Winamp鈥檚 bmp.w5s component that could have been exploited by an attacker to execute arbitrary code on a victim鈥檚 system. For an attack to be successful, a user must first open a specially crafted AVI file. It has been confirmed that the vulnerability affects version 5....

June 23, 2012 路 1 min 路 163 words 路 Omid Farhang

Opera 12 has been released

Norwegian company Opera Software has released Opera 12.00 just a few minutes ago. Opera users who start the browser on their system should see update notifications displayed to them in the next couple of hours. Those who do not want to wait that long can run a manual check for updates with a click on Opera > Help > Check for Updates. The update should then be picked up by the browser and downloaded automatically to the local system....

June 14, 2012 路 2 min 路 285 words 路 Omid Farhang