Secunia Defends its Word Worm Rating
692832
The CTO of security firm Secunia, which issued an "extremely critical" rating for a worm exploiting a previously undiscovered Word 2000 vulnerability, is defending his company's policies in the face of competitors who have rated the severity of the worm as "very low."
754347
Hacker web sites are claiming to have posted proof-of-concept exploit code for the latest critical Microsoft Corp software vulnerability, which is sometimes a precursor to broader attacks using a worm.
424521
The software maker has acknowledged it was wrong when it told users certain file formats were insecure.
676055
Three more vulnerabilities in Microsoft&#39;s Internet Explorer 6.0 browser were disclosed by Danish security vendor Secunia. By Gregg Keizer, TechWeb News.
219303
Microsoft is warning of a new unpatched vulnerability in its Word software.
71569
(InfoWorld) - Microsoft's Office software is under attack again, this time with anÂ unpatched flaw in the Windows 2000 version of Office 2000 being usedÂ by hackersÂ to run unauthorized software on a victim's computer. Microsoft confirmed on Tuesday that the bug exists, but it would not say when it plans to fix the problem. The critical vulnerability wasÂ first reported by SymantecÂ to users of its DeepSight threat notification service. Attackers are exploiting the flaw by sending malicious Word documents to victims, Symantec said. When these documents are opened, Word is tricked into installing malicious software on the PC. Symantec is calling this malware Trojan.MDropper. Trojan.MDropper installs malicious software on the computer, which in turn installs another Trojan horse program "which turns out to be new variant of Backdoor.Femo," Symantec said in an Web posting. Symantec testers had not been able to exploit the problem on more up-to-date versions of Office or Windows. On Tuesday Microsoft said that the bug was confined to Microsoft Word 2000. Microsoft is investigating the issue and may issue a patch once that investigation is completed, according to the company's public relations agency. Microsoft has spent a lot of timeÂ investigating and patching Office applications this year. Over the past few months there have been several reports concerning very targeted attacks, similar to this latest Office issue. Microsoft's last few security updatesÂ have been filled with patches for Office flaws, many of which had already been used in attacks.
197018
An unpatched security vulnerability in popular older versions of Microsoft Word poses a severe threat to users, security reporting firm Secunia warned yesterday.
372530
A new worm targeting a flaw in Sun Microsystems Inc.'s Solaris 10 OS delivers crude artsy payloads, including a drawing of a turkey in ASCII text.
413097
The firm has rated the flaw as moderately critical. It demonstrated the flaw on its site, with options for both users who use pop-up blockers and those who don&#39;t.
201915
Antivirus firm Symantec is facing a denial-of-service attack on its Web site from the latest version of the MyDoom worm. Authors of MyDoom.
2961
Secunia has posted a vulnerability marked as "highly critical" for users of any of the Avaya products that use PHP:   Avaya has acknowledged some vulnerabilities in various Avaya products, where some have unknown impacts and others can be exploited by malicious users to bypass certain security restrictions and potentially by malicious people to compromise a vulnerable system.   The following products are affected:   Avaya Communication Manager (CM 4.0 and CM 2.x prior to load 127.0) Avaya CCS/SES (CCS/SES 3.1.1) Avaya AES (AES 4.0)   Currently, according to the original announcement from Avaya, there are two issues that have been found and are able to be exploited - an issue with the xmlrpc extension and a problem with the ftp extension. Currently, there is no patch to correct these issues, but you can keep track of their current status via their entries
516444
Security vendor F-Secure's own antivirus products are in need of patches to seal off several vulnerabilities, including one that fellow security vendor Secunia rates as "highly critical."
101705
Cross-platform worm targeted at OpenOffice.org and StarOffice riles up open-source advocates, but does little damage.
578328
(InfoWorld) - A new variant ofÂ the Stration worm, which has been plaguing Windows users for the past year, has made the jump from Skype to the ICQ and MSN Messenger networks. This latest variant popped up earlier this week, according to Chris Boyd, a researcher at FaceTime Communications, who blogs under the pseudonym "Paperghost." "They're using Skype as a jump off into other more established networks," Boyd said. "The infection will go looking for other instant messaging clients that are on the PC and then attempt to send the infection message that it initially sends through Skype through these other chat systems." For a computer to be infected, a user must first click on a link and then agree to download an executable file. In one sample provided by Boyd, the malicious link is listed below the instant message, "Check this out. Give me your opinion." Once installed, the worm will gradually start to send out messages to the victim's contacts, Boyd said. Instant message worms have spread from network-to-network in the past, but this is the first time Boyd has seen a worm jump from Skype to another network. "It's an odd system to make, because these guys have a foot in the door [in the Skype network]," he said. "You think they'd focus all their energies onto exploiting Skype." Stration is not widespread and is considered to be a low-risk infection, but it has been a tough worm to fight for some security vendors. Over the past year it has morphed into hundreds of variants, and antivirus companies have been having a hard time keeping track of its many iterations. Stration has also been called "Warezov" and "Stratio." Nobody knows who is behind the worm, but the domains that host the malicious code are registered through a Chinese Internet company, Boyd said. Â
350808
Latest regionally-targeted attack hits Japan Trojan-touting miscreants are actively exploiting a flaw in Ichitaro, a word processing package from JustSystems that's widely used in Japan.â¦
541239
In worm's latest version, authors ridicule rival worm Netsky and promise to attack Symantec, McAfee and others.
740908
Danish security research firm Secunia has reported a vulnerability that occurs in most browsers that can be exploited by hackers looking to spoof the content of Web sites.