PDFs open critical hole in Internet Explorer
43324
Botnet surprise A critical vulnerability has been identified in Adobe's Acrobat and Reader software which affects Internet Explorer users.â¦
96676
Microsoft on Wednesday released an update to Internet Explorer (IE) to fix a security flaw that was discovered a month ago and has since been exploited to attack users.
209227
Security researchers are warning of another pair of vulnerabilities in Microsoft Corp.&#39;s Internet Explorer browser affecting users on fully patched Windows XP Service Pack 2 systems.
539621
Researchers have found a trio of flaws in Internet Explorer--making almost 20 in total.
241440
Blog: Patches include the Firefox portion of the IE-Firefox flaw identified last week.
83266
(InfoWorld) - A new update for the Firefox browser fixes an unusual vulnerability that could cause malicious code to run if the browser is launched by Microsoft's Internet Explorer. The critical vulnerability involves Internet Explorer's ability to launch other applications such as Excel or Firefox after a user clicks on a specially written link in a Web page. Explorer does not properly check the syntax of the link, which could allow a malicious link to attack Firefox if launched, according to Mozilla, the open source project that develops Firefox. Microsoft said itÂ didn't feel it was an issue for Explorer. Either way, Firefox's 2.0.0.5 release fixes the problem by now validating incoming data. The update will automatically be pushed out to Firefox 2.0 users via the built-in update system, Mozilla said in an advisory. The update also fixes seven other vulnerabilities, two of which are considered "critical" by Mozilla. One problem, labelled 2007-18, is a memory corruption problem that could cause arbitrary code to run on a machine. The other, 2007-21, could also allow arbitrary code to run.
223094
Adobe released on Wednesday an update that fixes vulnerabilities in its widely used Reader document viewing program.Users are urged to upgrade to version 8.1.2, available for download on Adobe&#39;s Web site.Adobe has not given out details of the vulnerabilities, even though the company has a section on its Web site detailing security advisories for Reader.That could indicate that the vulnerabilities are fairly serious and could result in a compromised PC, said Thomas Kristensen, chief technical officer for Secunia, a security vendor in Denmark.Secunia is performing a binary analysis of the old and new versions of Reader to figure out the vulnerabilities. However, that analysis takes one to three days, Kristensen said.Kristensen said no proof-of-concept code has been seen yet and no attacks have been reported. But people should be especially cautious of PDFs (Portable Document Format), the common file type that Reader opens.&quot;PDFs are generally highly trusted,&quot; Kristensen said. &quot;It&#39;s a common format for exchanging information.&quot;Secunia estimates that more than 60 percent of home PC users have the Reader program, based on data from one of its software products that checks to see if programs have up-to-date patches. Corporate use of Reader is less, around 30 percent, since many companies use other business applications that can open PDFs, Kristensen said.Hackers seized on PDFs&#160;last year after the disclosure of a&#160;protocol handling vulnerability involving Windows. The problem allowed them to create malicious PDF documents that would infect a PC with malicious software if opened.Adobe officials could not be reached.&#160;
465721
Recent months have been terrible for Internet Explorer. Their have been tons of bug and security flaw reported. So much so, many security agencies have started recommending people who surf online to shift to alternate browsers.
250610
Blog: Critical patches include those for Internet Explorer, Outlook Express and Windows Mail,  Win 32 API, and the Schannel Security Package.
311140
Like millions of computer users, Bob Davis found out the hard way that Microsoft&#39;s Internet Explorer has security flaws. &quot;My computer was taken over with viruses and spyware and so, unfortunately, I had to reformat my entire hard drive,&quot; Davis said.
124001
Firefox and Internet Explorer 7 do not properly handle JavaScript "onUnload" events and can be tricked into taking a user to the wrong URL, according to security researcher Michal Zalewski.
178100
Coming to an inbox near you A day after Adobe patched a serious security hole in its Reader and Acrobat programs, miscreants are flooding email inboxes with malware-tainted PDF files that try to remotely hijack vulnerable computers.â¦
607294
Recently disclosed security holes that affect Internet Explorer 7 and Firefox could let attackers grab data via malicious Web sites.
714322
Microsoft has released an update to resolve a buffer overflow in Internet Explorer 6, which could allow attackers to run arbitrary code and take control of vulnerable systems.
750792
Plus: More Office holes, and a major Adobe problem that affects all browsers.
555920
MICROSOFT has issued an out-of-schedule critical patch for its Internet Explorer web browser, plugging a security hole that could allow a hacker to take control of a PC.
662176
Security flaws in browser Internet Explorer are being exploited by porn sites to hijack Windows PCs.