Adobe flashes security updates
24126
Blog: Adobe Systems issues three critical security updates designed to address vulnerabilities in its Flash Player.
337058
Unpatched bugs that could allow attackers to take over Windows systems via Internet Explorer. The bugs were discovered by security company FrSIRT and reported to Adobe a week ago.
237111
PDF peril Adobe users are being urged to upgrade their software after the firm reassessed the impact of a recently discovered vulnerability in Adobe Reader and Adobe Acrobat 7.â¦
660592
(InfoWorld) - After handling 19 sets of patches inÂ JulyÂ andÂ August, system administrators will catch a bit of a break next week when Microsoft Corp. is expected to release just three security updates for its Windows and Office products. On Thursday, Microsoft said that only one of these updates, for Office, is rated as critical. The updates will be released Tuesday in line with Microsoft's monthly patch release schedule. Microsoft'sÂ advance notification on the updatesÂ can be found at its Web site. The other two updates, which fix problems with Windows, are rated no higher than Important, meaning that user action would be required before an attack based on these flaws could succeed. As usual, Microsoft did not release any further details on the patches. That information will be divulged when the patches are made available Tuesday. But the company may be planning to patch aÂ recently reported flaw in its Word 2000 software. Earlier this week Symantec Corp. warned that the flaw was being exploited by attackers to run unauthorized software on a victim's computer. Â
206068
(InfoWorld) - Mozilla updated the preview of Firefox 3.0 to alpha 8 Thursday, unveiling for the first time to users several security features it has talked up for months. Among the security provisions debuting in the new alpha of "Gran Paradiso," the code name for Firefox 3.0, are built-in anti-malware warnings and protection against rogue extension updates, according to documentation Mozilla posted to its Web site. The malware blocker, which was first mocked up in June, will block Web sites thought to contain malicious downloads. The feature, a companion to the phishing site alert system in the current Firefox 2.0, will use information provided by Google to flag potentially-dangerous sites, warn anyone trying to reach those URLs with Firefox, and automatically block access to the site. Mozilla also pointed to a URL that demonstrates the new malware blocker for alpha 8 users. Also taking a bow is a check meant to prevent plug-ins' automatic updates from sending users to malicious sites where they might be infected by attack code or drive-by downloads. Firefox relies on small plug-ins -- called "extensions" in the Mozilla vernacular -- for much of its power and flexibility. Several thousand extensions have been written, the vast bulk of them by outside developers, that do everything from boost browsing speed to block irritating Flash animations. Firefox regularly checks to see if the installed extensions are up to date, and, if not, automatically pulls in the newest version and installs it. "Firefox automatically checks for updates to add-ons using a URL specified in the add-on's install manifest," Mozilla spells out in a developer's document. "Currently there are no requirements placed on these URLs. In particular, [they are not] required to be https. This allows either the update manifest or the update package to be compromised, potentially resulting in the injection of malicious updates. A demonstration of one form of compromise is already public." Most extensions are hosted on Mozilla's own servers -- at the servers feeding its Add-ons site -- but some are not; it's those off-site extensions that Mozilla wants to lock down. To stymie attacks through a compromised extension update, Mozilla will require updates -- both the actual update package and the much smaller "manifest," or notification of an update -- to be delivered over an SSL-secured connection. Or the update must be digitally signed. The change doesn't affect the initial installation of an extension, something Mozilla recognized. "[This] has no impact on the security of initial add-on installs," it told developers in the online guide. This newest preview, which can be downloaded in versions for Windows, Mac OS X, and Linux from the Mozilla site, still comes with a warning to end-users. "Alpha 8 is intended for Web application developers and our testing community. Current users of Mozilla Firefox should not use Gran Paradiso Alpha 8," the browser's release notes. Mozilla has not officially committed to a release date for the final version of Firefox 3.0. Computerworld is an InfoWorld affiliate
495234
Apple has released a new security patch for QuickTime, its eighth update this year for the media player software.
429667
Software maker Adobe Systems Inc. has upgraded its flagship desktop publishing products, giving powerful new features to not only the authors of electronic documents but also their recipients.
530659
The developers of a Web services application environment that leverages the leased computing services of Amazon have reworked their Web functionality to incorporate Adobe's Web language for Flash applications.
42081
Blog: Popular add-ons could have their update process hijacked by man-in-the-middle attacks.
178100
Coming to an inbox near you A day after Adobe patched a serious security hole in its Reader and Acrobat programs, miscreants are flooding email inboxes with malware-tainted PDF files that try to remotely hijack vulnerable computers.â¦
557779
Adobe&#39;s update of Photoshop Elements adds several new features and enhancements that allow users to edit photos with a few mouse clicks.
729969
Adobe Systems Inc. today updated its free Reader software to version 8.1.2 to eliminate security flaws, but offered little information about what was patched and why.
63624
Adobe patched its Reader and Acrobat programs today to fix a vulnerability that left most Windows XP users exposed to exploits arriving as malicious PDF files.
23136
The hacker who discovered a recently patched QuickTime flaw affecting the Firefox browser says he has found an equally serious flaw in Adobe Systems Inc.&#39;s PDF file format.
589386
Adobe unveils Flash Home, a mobile version of Flash, and Flash Cast 2, an 'offline portal solution.'
144979
More updates on the patch bandwagon Sys admins hoping to put their feet up after Microsoft's monthly update, which went far from smoothly, faced the problem of pushing out Java and Flash security updates issued at the tail end of last week.â¦
424439
10.3.7 fixes bugs, fills security holes