files flaw
RSS files flawRIM patches PDF security hole
News RIM has released a patch for a security flaw in BlackBerry Enterprise Server, which exposed corporate networks to hackers via a maliciously crafted PDF document. The flaw affected the BlackBerry... [23 Jul 2008]
RIM warns on BlackBerry PDF flaw
News RIM is warning businesses to disable the function that allows a BlackBerry to read PDF files until an update can be issued, after a security flaw was found in the company's software. The... [17 Jul 2008]
Corporations riddled with security holes
News Open Secure Shell (SSH) buffer management flaw below version 3.7.1: Some SSH servers are running a version of OpenSSH which is known to be vulnerable to a buffer management vulnerability that can allow attackers to stop... [19 Jun 2008]
QuickTime flaw could fuel Second Life stealing
News Researchers have shown how exploiting a flaw within QuickTime could allow an attacker could steal from other users in Second Life. In this case, researchers exploited a recent flaw within RTSP tunnelling. [18 Feb 2008]
Happy 10th birthday Mozilla - there's a bug in your cake
News Following the notification of the flaw by vulnerability researcher Gerry Eisenhaur, Snyder confirmed the flaw would affect users who had installed "flat" Firefox extensions - add-ons, such as Download... [25 Jan 2008]
Microsoft patches 'the class of 2007'
News Last month's Microsoft patches included a fix for a zero-day flaw in Windows that also affected Vista. This includes an expected patch for a flaw in the Windows domain name system, or DNS. The Word... [09 May 2007]
Photoshop invaded by critical flaw
News Exploit code that could take advantage of a "highly critical" security flaw in the most recent versions of Adobe Photoshop has been published, a security researcher reported. The security flaw affects... [27 Apr 2007]
Malicious code getting harder to spot
News But an attack could also lurk on a trusted site by exploiting a common flaw known as cross-site scripting. Flash files can be analysed using a program called Flasm, he added. Cyber crooks who rig... [19 Apr 2007]
Windows at risk from fancy cursors
News The exposure to attacks that exploit the flaw is mitigated on Vista machines with Internet Explorer 7, Microsoft noted. As a result, simply blocking such files won't protect a PC. IE 7 protected mode... [30 Mar 2007]
Apple plugs yet more QuickTimes holes
News In January, the Mac maker put out a fix for a zero-day flaw that was released as part of the "Month of the Apple Bugs" project. The security updates repair problems in the way the software handles QuickTime, Midi, 3GP,... [06 Mar 2007]
Security warning over tech support tools
News The problem is "high" risk but is mitigated somewhat, because triggering the flaw would require some action on the part of the user, Symantec noted. The US-Cert recommends the SupportSoft fix but has found eight... [27 Feb 2007]
Microsoft probing holes in Vista, IE 7
News The IE flaw could only be exploited if an attacker were to lure a victim to a malicious website and then persuade the user to enter the address of a trusted site into the address bar. This could be exploited by an... [27 Feb 2007]
Holes found in Google Desktop
News One of the problems is a cross-site scripting flaw that could let an outsider look through files on a compromised machine. Watchfire notified Google on 4 January of three vulnerabilities and one... [22 Feb 2007]
More flaws: Bugs hit Firefox, IE
News In addition, another Firefox flaw could let attackers change cookie files on the user's PC, he said. Microsoft confirmed the flaw could open up files stored on a PC's... [19 Feb 2007]
Apple fixes four flaws
News This includes another iChat flaw that could cause the application to crash as well as a fix for a UserNotification flaw that could allow system files to be overwritten. There's a buffer... [16 Feb 2007]
