SAP upgrades foils buffer overflow flaws
508088
Nick of time Security researchers have discovered a slew of vulnerabilities in enterprise software packages from SAP that create a means for hackers inject malware onto or crash vulnerable systems.â¦
599465
SAP AG on Wednesday unveiled a service that evaluates security settings across a customer&#39;s SAP enterprise system. SAP Security Optimization helps customers identify and fix vulnerabilities
54392
Hewlett-Packard is beefing up its Integrity BladeSystems with a new model released this week thatâs intended to handle memory and CPU intensive applications.
330405
SAP has decided to support virtual server installations.
498941
(InfoWorld) - Users are being advised to upgrade to newer versions of the RealPlayer and Helix Player multimedia products because of a critical security flaw. The flaw could allow an attacker to gain control over a user's PC using a buffer overflow vulnerability, a memory problem that can allow unauthorized code to run on a machine, according to iDefense Inc. The vulnerability was discovered last October but publicly disclosed Tuesday on iDefense's Web site. Affected versions of the software include the 10.5 "gold" RealPlayer and any 1.x version of Helix Player, according to the French Security Incident Response Team (FrSIRT). FrSIRT categorized the problems as "critical," adding that a denial-of-service attack is also possible. RealPlayer users should receive notification of a "critical update," advising them to upgrade toÂ the beta version of a new release, version 11, said Lewis Webb, a spokesman for RealNetworks. The new version can be downloaded from the RealPlayer Web site, although the site does not mention the security problem. Current versions of Helix Player, an open-source version of RealPlayer, are available on itsÂ developer Web site. For a successful attack, a user would have to be tricked into downloading from a Web site a malicious SMIL (synchronized multimedia integration language) file, a format used in rendering media, iDefense said. Â
542423
Security firm Secunia has posted an advisory about a potential Mac OS X UDIF Memory Corruption Vulnerability. The original source of the report states that the vulnerability is present on a fully-patched Intel-based Mac.
670404
Users hope SAP AG's admission that it inappropriately downloaded proprietary technical data from Oracle databases won't hurt the vendor in the long run.
346257
The admission by SAP AG that one of its units made "inappropriate downloads" of Oracle code confirms the allegations behind its lawsuit, Oracle says.
11119
In what could be the quickest patch ever to be released by Microsoft, the company on Tuesday publicly issued a fix for the highly-publicized Vector Markup Language (VML) vulnerability that surfaced last week and was being actively exploited by numerous attacks.
643225
A team of analysts has successfully exploited a heap corruption vulnerability on a fully-patched Mac, and users running the Samba file- and printer-sharing application are advised to update the application manually.
435582
Blog: Updates address some critical vulnerabilities in the popular browser.
654138
Users urged to upgrade RealPlayer and Helix Player to repair critical security flaw.
300950
Update addresses potential denial-of-service vulnerabilities as well as a flaw in QuickTime.
685791
Database administrators have a flock of new products to choose from right now, but hardware problems and glitches elsewhere in the system can negate version improvements. Computerworld talked to DBAs balancing the new products with the old realities.
361991
Microsoft, which recommended immediate updates, said the newly discovered vulnerability could allow remote code execution of code thanks to a buffer-overrun vulnerability in the processing of JPEG image formats.
353081
Blog: Recently patched browser from Apple springs another leak.
247413
OS security fix is being rolled out to users who have enabled Automatic Updates.