Big patch for big hole in Google Desktop
84090
A recently discovered hole in Google Desktop has been quietly patched after researchers discreetly brought it to the company's attention. Though exploiting the vulnerability wasn't easy, the impact on compromised systems could have been devastating.
555449
Microsoft this week released a patch to fix an important vulnerability in Internet Explorer, even as a new worm that took advantage of an as-yet-unpatched hole in the Web browser spread.
57413
Third-party fix available to repair a serious flaw in Windows for which Microsoft no longer provides security updates.
19944
Google Inc. (GOOG.O: Quote, Profile, Research) said on Monday it has fixed a software flaw that could allow hackers to view information contained on personal computers running the No.
584817
Will a trifecta try at fixing Internet Explorer patch be the charm?
527646
Integrated attack Google has fixed a security flaw in its desktop search software that created a means for hackers to rifle through personal files on users' PCs.â¦
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
3000
Google fixed a flaw in its Google Desktop Search(GDS)that could have given hackers access to users&#39; local searches, officials said Monday.
609685
Microsoft today released an out-of-cycle security bulletin and patch for a critical hole in Internet Explorer that is already being widely exploited by attackers.
99286
THE MOZILLA FOUNDATION has announced that a hole in its Firefox software has been patched. Firefox suffers from a vulnerability that could allow hackers to delete all the files in the Download directory.
685853
Microsoft has issued fixes for more than 20 holes in its software in its February security update.
11119
In what could be the quickest patch ever to be released by Microsoft, the company on Tuesday publicly issued a fix for the highly-publicized Vector Markup Language (VML) vulnerability that surfaced last week and was being actively exploited by numerous attacks.
55054
Microsoft issues fixes for more than 20 holes in its software in its February security update.
657731
Google is working to fix a bug in the Google Toolbar that could allow criminals to steal data or install malicious software on a system, a security researcher warned Tuesday.The flaw lies in the mechanism Google Toolbar uses to add new buttons on the browser. Because the toolbar does not perform adequate checks when new buttons are being installed, a hacker could make his button appear as though it was being downloaded from a legitimate site when in fact it came from somewhere else. By spoofing the origin of the toolbar button, an attacker could download malicious files or launch a phishing attack against the victim, wrote security researcher Aviv Raff in a blog post on the issue.Raff has posted proof of concept code, showing how such an attack would work with the Internet Explorer browser. A Google spokeswoman confirmed Tuesday that the company is working to fix the problem.The attack requires many steps. First, the victim would have to be tricked into clicking on a Web link that would then pop up a window asking the user if he wants to install a custom button on his toolbar. Because of the flaw, this alert could look like it was downloading the button from a legitimate site, such as Google.com, even if it were not. Once the button was installed on the toolbar, the victim would then have to click on it and, finally, agree to download and run an executable file for the malicious software to be installed.Because the user would have to go through so many steps in order to fall victim to the attack, the bug isn&#39;t a critical one, said Marc Maiffret, an independent security researcher. &quot;While it is interesting, it&#39;s probably a low threat compared to other flaws out there,&quot; he said.Still, it was sloppy work on Google&#39;s part to miss such a simple attack, he said. &quot;They should definitely assess how it slipped through the cracks,&quot; he said.This is not the first obvious Google flaw that Raff has found. Last month, he showed how a simple Web programming error on the Google.com Web site could allow attackers to launch what&#39;s known as a cross-site scripting attack.Because Google&#39;s programmers didn&#39;t properly check the HTML generated by the Google search engine, Raff was able to create a specially crafted Google link that, when clicked by the victim, would trick the browser into running unauthorized scripting code. This type of link could be used to steal the victim&#39;s Google account or conduct phishing attacks, Raff saidThis error was fixed by Google just hours after Raff notified the company of the problem, but a demo of the flaw being exploited can be seen online.
571638
(Article Central) A glitch was discovered in Google Desktop that could allow an attacker to access the contents of a PC from the Internet, according to a report in The New York Times.
314572
A security flaw that could have caused big trouble for Google and its new Desktop Search tool has been fixed, thanks to a Rice University professor and two of his graduate students.
734289
A flaw discovered in Google Desktop Search last year could have opened up users to the risk of having their personal data compromised. However, the issue was fixed within weeks of its discovery.