Yahoo Messenger patches security flaw, again
374
Yahoo issues patch for a highly critical security flaw just a week after it issued another Yahoo IM security update.
216439
Acknowledging that its patching process has "not been an example of our best work," Microsoft this week issued a second update to security bulletin MS06-042, which was released in August. The original patch included a security vulnerability - and it turns out the fix introduced even more.
622159
Microsoft is forcing Messenger users to upgrade in order to patch a security vulnerability.
434379
'Interface flapping' Juniper has published a security update designed to fix a bug involving its router software.â¦
143981
(InfoWorld) - MozillaÂ has released an update to its Firefox browser, fixing a number of security flaws in the product. The Firefox 2.0.0.2 release includes a fix for a bug disclosed by security researcher Michal Zalewsky last week. That flaw can be exploited by attackers to manipulate cookie information in the Firefox browser, making it probably the most important fix in the update, according to Window Snyder, Mozilla's head of security strategy. "The potential to compromise a user's account is almost as serious as compromising their machine," she said Friday via instant message. "Since the details of how to exploit the vulnerability are publicly available, the risk to users is increased." The updates also include a fix for a previously undisclosed memory corruption flaw in the browser that could be exploited to run unauthorized software on a Firefox user's computer. This flaw could also affect Thunderbird users who have configured their mail client to run JavaScript automatically, something that Mozilla does not recommend. Thunderbird is Mozilla's free e-mail client. The patches were released on Friday afternoon and should soon be delivered via Firefox's automatic software update mechanism, Snyder said. Mozilla has patched a total of seven Firefox bugs and is also addressing two bugs in Thunderbird. The latest browser release also includes enhancements to make it run better with Windows Vista as well as support for the Afrikaans, Belarusian, Georgian, and Kurdish languages.
550626
Company patches one search engine security flaw and is notified of another.
40932
Patches address flaws in Microsoft Agent in Windows 2000, Windows Services for UNIX, Visual Studio, MSN Messenger and Windows Live Messenger.
112205
Software update patches bug in wireless drivers that left systems vulnerable.
529117
Yahoo! has patched a flaw in the open source Portable Network Graphics (PNG) image format that is utilized by its real-time communications product Yahoo! Messenger. Yahoo! spokesperson Terrell Karlsten told BetaNews, "Beginning today, we are notifying users who are currently running Windows versions 6.0 to install the security update. Upon logging into Yahoo! Messenger, users will be prompted with a message window that invites them to update their service." Users may also download the new release separately.
341717
Upgrade averts code catastrophe Yahoo! users are urged to upgrade their instant messaging software following the discovery of a brace of security vulnerabilities - the second set of serious security flaws involving Yahoo! Messenger in as many weeks.â¦
1569
Four security bulletins issued today patch just four vulnerabilities in Windows, Visual Studio, and the MSN and Windows Live Messenger software.
339482
Apple Computer Inc. released this week a security patch for its Mac OS X iChat instant messaging client, which contains a flaw that could a hacker could use to takeover a person&#39;s computer.
691908
(InfoWorld) - Microsoft has released its security patches for September, fixing known vulnerabilities in its MSN Messenger software and Unix services for Windows as well as a critical bug in Windows 2000. In total, Microsoft patched four bugs in its products. This was one less update than expected following the software maker's last-minute decision to scrap a fix for its SharePoint collaboration software. The Windows 2000 update is the only one Microsoft rates as critical. It affects the Microsoft Agent software that Web developers use to create interactive characters on Web pages. By tricking a Windows 2000 user into visiting a maliciously encoded Web page, an attacker could exploit this flaw to run unauthorized software on a victim's computer. This is not the first time Microsoft has been forced to patch a critical bug in Microsoft Agent. In April, the company fixed a similar flaw that also affected Windows XP users. Because the MSN Messenger and Windows Services for Unix flaws were both publicly disclosed last month, they should also be given priority said Amol Sarwate, manager of Qualys's vulnerability research lab. "They had both been known for awhile, but they are important," he said. "Especially the MSN vulnerability." MSN Messenger and Windows Live Messenger users will be prompted to upgrade their software when they connect with Microsoft's instant-messaging services, Microsoft said in its notes on the security update. "If you do not upgrade to a non-affected version of the MSN Messenger or Windows Live Messenger client, depending on your platform, you will be notified to upgrade on each attempt to sign on." MSN Messenger 7.0.0820 or Windows Live Messenger 8.1 are not vulnerable to the flaw, Microsoft said. The fourth patch issued Tuesday fixes a bug in Crystal Reports for Visual Studio. Attackers could run code on a victim's PC by getting them to open a specially crafted Crystal Reports RPT file, Microsoft said. Overall, the September updates are a far less serious group of patches than the nine updates Microsoft released last month. "Compared to last month, Patch Tuesday in September is almost anticlimactic," security vendor McAfee said in a statement. "Customers who have legacy applications installed on Windows Server 2000 Service Pack 4 should be paying the most attention, but we don't foresee a lot of exploitation of the Windows 2000 vulnerability. Not many people will use those systems to surf the Web, which would be the attack vector."
759134
In a seeming replay of the uproar around last year's WMF vulnerability, a third-party patch has been released for the VML hole in Internet Explorer.
526721
Microsoft Corp. released four software patches Tuesday to fix security flaws, including one that could allow hackers to take over computers running the company's instant messaging programs.
378096
Apple Computer last week released a security patch for its Mac OS X iChat instant messaging client, which contains a flaw that hackers could use to takeover a person&#39;s computer.
123349
More VoIP security woes Skype has patched a flaw involving its SkypeFind feature. But the security researcher who discovered the flaw said the VoIP platform remains exposed to cross-zone scripting vulnerabilities, like the latest SkypeFind bug and an earlier flaw involving movie files.â¦Learn &amp; Contribute, Live &amp; Online - The Register Debates Green Computing