Posts Tagged ‘Patch’

Microsoft issues fix for Internet Explorer malware exploit, promises full patch by Friday

Internet Explorer zero-day vulnerability (Metasploit)

Fast payday loans For Every One

Just a few short days after identifying a security exploit in multiple versions Internet Explorer, Microsoft has issued a Windows fix it to resolve the issue, with a comprehensive update planned for this Friday. The vulnerability, which was discovered on Monday, put millions of machines at risk by allowing malware to bypass existing security protocols via a specially crafted Flash animation. While it’s exact origins remain unknown, the exploit was believed to have been propagated by the same hacker group that launched the zero-day Java vulnerability last month. While the fix it offers immediate protection, Microsoft urges all Internet Explorer users to download and install their forthcoming security update when it becomes available via…

Continue reading…



Incoming search terms:

Related Posts:

Microsoft to patch critical Internet Explorer 9 vulnerability next week

cluster of locks security privacy stock 1024

Microsoft issued its advanced bulletin notification for its July 2012 Patch Tuesday this week. The software maker says it will release nine patches in total next Tuesday, with three of them rated critical and six listed as important. Out of the three critical patches, one will address a vulnerability that affects Internet Explorer 9. “It doesn’t affect IE9′s predecessors, which means that it was introduced in the latest iteration of the browser,” explains Marcus Carey, security researcher at Rapid7. “If you are running IE9, you should definitely apply this patch.”

The two other critical bulletins could allow malicious users to remotely execute code on Windows operating systems, including all supported server and client versions. “Many…

Continue reading…

Incoming search terms:

Related Posts:

Adobe changes tune on CS5 updates, won’t seek paid CS6 upgrade to patch vulnerabilities

Adobe reportedly asking some CS users to upgrade if they want a patch for certain vulnerabilities

Things have gotten interesting in the world of CS updates. Recently, Computerworld reported that Adobe had informed folks using an older version of its famed Creative Suite — CS5 and CS5.5, to be exact — they’d have to shell out the CS6 upgrade fee in order to get a fix for some recently discovered bugs. Apparently, Adobe took notice to its customers’ dissatisfaction and updated its initial blog post with a changed tune, stating, “We are in the process of resolving these vulnerabilities in Adobe Photoshop CS5.x, and will update this Security Bulletin once the patch is available.” The same is true for both Illustrator and Flash. This kerfuffle started after Adobe handed out warnings for eight “critical” vulnerabilities found in certain versions of the three applications — some of which are said to be exploitable and could potentially be used to “take control of the affected system.” We’ll see how it all plays out over the upcoming days, but in the meantime hit the links below to see if you need to take any action.

James Trew and Joe Pollicino contributed to this post.

Adobe changes tune on CS5 updates, won’t seek paid CS6 upgrade to patch vulnerabilities originally appeared on Engadget on Sat, 12 May 2012 23:59:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceComputerworld, Adobe, (2), (3)  | Email this | Comments

Incoming search terms:

Related Posts:

Four Windows bulletins for November Patch Tuesday, one critical

Microsoft announced on Thursday that it plans to issue four Windows related bulletins in its November Patch Tuesday.

The four bulletins fix a variety of problems in all supported versions of Windows. Windows 7 is affected by all four bulletins and the only critical bulletin, a remote code execution flaw, also affects Windows 7.

Microsoft published eight bulletins in October to fix problems in Internet Explorer, Windows, Silverlight and others. Two of the October bulletins were marked critical. Microsoft is not planning to release a patch for a recently discovered critical Windows kernel issue. The vulnerability was discovered as part of the Duqu malware attacks. The software giant revealed on Tuesday that it was working on a patch for a flaw found in the Duqu malware. Microsoft issued a temporary workaround on Thursday to mitigate potential attacks using the vulnerability. Microsoft’s temporary workaround can be applied to any Windows system. The company has provided a Fix it that allows end users and enterprise customers to quickly deploy the fix.

Microsoft’s November Patch Tuesday will commence on November 8 at 10AM PST.

Four Windows bulletins for November Patch Tuesday, one critical originally appeared at WinRumors.com.



Related Posts:

HTC confirms security hole, says patch is incoming

HTC held true to its promise to look into the security vulnerability that surfaced over the weekend, an apparent glitch that allows any app requesting internet access to take a peek at a user account information, GPS location, system logs, and other potentially private data. While HTC assured us that user data isn’t at risk of being harmed by its own software, a third party malware app could exploit the security flaw and cause some trouble. The outfit is already building a patch, and will ship it out in an over the air update after a short testing period with its carrier partners. Until then? HTC recommends steering clear of apps from publishers you don’t trust. Hit the break to see the official statement.

Continue reading HTC confirms security hole, says patch is incoming

HTC confirms security hole, says patch is incoming originally appeared on Engadget on Tue, 04 Oct 2011 01:47:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments

Related Posts:

Microsoft accidentally publishes Patch Tuesday bulletins early

Microsoft Patch Tuesday

Microsoft published details about a number of its upcoming Patch Tuesday fixes on Friday.

The software giant accidentally published the details of five bulletins that the company plans to release on September 13. PCMag was able to snag the details on all five patches:

  • MS11-070: Vulnerability in WINS Could Allow Elevation of Privilege— affects all Windows Server versions except Itanium. WINS improperly handles certain specifically crafted data on the loopback address. It’s not clear to me how difficult this would be to exploit. On the one hand it requires valid logon credentials and the ability to log on locally, but Terminal Server users would have those. WINS is not necessary and may not be installed, but then again it may. Note that this is a privilege escalation vulnerability for users directly on the server, so if it were exploited the consequences could be quite severe.
  • MS11-071: Vulnerability in Windows Components Could Allow Remote Code Execution—This is another instance of the “insecure library loading” bug which came out last summer and which we knew would affect numerous Windows components and 3rd party software. The components in this case are the Display Panning CPL Extension (deskpan.dll), Microsoft EAPHost Authenticator Service, Microsoft Management Console (MMC), Folder Redirection, the Japanese Input Method Editor (IME), and HyperTerminal. All versions of Windows are affected.
  • MS11-072: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution—This bulletin describes 5 vulnerabilities, some of which affect all versions of Excel, including all Mac versions. Certain Microsoft server applications are also affected, specifically SharePoint Server and Office Web Apps. All of the vulnerabilities come from improper parsing of specially-crafted Excel files.
  • MS11-073: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution—Two vulnerabilities affect Windows versions of Office. One is another insecure library loading vulnerability and the other an error in the parsing of specially-crafted Word documents.
  • MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege—Six vulnerabilities in various Microsoft server products, principally SharePoint, could allow elevation of privilege and information disclosure..
The gaffe is embarrassing for Microsoft who provides itself on a strict and thorough security process. The extra days notice also provides hackers and malicious attackers more time to try and figure out the flaws before Microsoft is able to publish the patches to end users. Thankfully only the advisory information was let loose instead of the full patches themselves. Hackers usually reverse-engineer the patches to discover which parts of the software that Microsoft has altered.

Microsoft accidentally publishes Patch Tuesday bulletins early originally appeared at WinRumors.com.



Related Posts:

Sn0wbreeze 2.3b2 Adds Multitouch Gestures, Mobile Substrate Patch, iBooty, iBSS Fix for iOS 4.3 Jailbreak

Sn0wbreeze 2.3b2 Adds Multitouch Gestures, Mobile Substrate Patch, iBooty, iBSS Fix for iOS 4.3 Jailbreak is a post from: Gadgets DNA

iOS hacker iH8sn0w has pushed BETA 2 to his flagship tool Sn0wbreeze 2.3 to jailbreak iOS 4.3 compatible iOS devices except iPad 2. However, ultrasn0w is still broken, so all users who rely on unlock MUST stay away.

The new updated tool now brings Multitasking Gestures option in Settings App (as shown in video). Fixes all issues pertaining to iBooty and iBSS. Mobilesubstrate now works fine, which was initially breaking due to ASLR in iOS 4.3 and more. No more sleep bugs in iPod Touches and all small issues with first generation iPad has been resolved. Steven has provided iREB to top bar for future re-runs within sn0wbreeze.

Being a “Tethered” jailbreak, you need to boot your device via iBooty except iPhone 3GS (old bootroms), which is untethered. However, the steps to jailbreak your iOS devices remain same as mentioned before. Download sn0wbreeze 2.3b2 and follow the guide on how to jailbreak iPhone 4, 3GS, iPod touch 4G / 3G and iPad running on iOS 4.3.

You can follow us on twitter and join our facebook fanpage to keep yourself updated on such proven iPhone, iPod Touch and iPad Jailbreak Guides. You may also like to check out:

  • How to Jailbreak iOS 4.3 on iPad, iPhone, iPod touch with PwnageTool
  • How to Jailbreak Apple TV2 iOS 4.3 with Seas0nPass on Windows
  • How to Jailbreak Apple TV2 iOS 4.3 with Seas0nPass on Mac

Related Posts:

Sony about to issue PS3 update with ‘minor,’ mysterious security patch

Sony just mentioned on its official PlayStation blog that the PS3 is about to get a “minor” update, v3.56. With Sony about to host a press event in Tokyo, it would be nice if we were getting some new functionality for our update timeout, but apparently all it adds is a security patch (just like 3.55), and for some reason we get the impression that this “security patch” is less about defense against baddies and more about trying to shore up the PS3 jailbreak that’s currently running rampant. Of course, there are some serious security concerns when it comes to jailbroken PS3s, like the fact that they allow some serious cheating in select multiplayer games, so a truly competent, non-user-hostile security patch wouldn’t be all bad. We guess we’ll see what we get when the update lands, presumably later today.

[Thanks to everyone who sent this in]

Sony about to issue PS3 update with ‘minor,’ mysterious security patch originally appeared on Engadget on Wed, 26 Jan 2011 23:13:00 EDT. Please see our terms for use of feeds.

Permalink PlayStation Blog  |   | Email this | Comments
Engadget

Related Posts:

PS3 update v3.55 adds ‘a security patch,’ nothing else

PS3 update v3.55 adds 'a security patch,' nothing else

Another day, another annoying distraction when you turn on your PlayStation 3. Prepare to be prompted to update your machine, version 3.55 hitting the internets and offering a single thing: “a security patch.” No word on exactly which holes are being spackled over or how long it’ll take for modders to drill them back out again, but be sure to pledge your allegiance and update today, so that you can be better prepared to update again tomorrow.

PS3 update v3.55 adds ‘a security patch,’ nothing else originally appeared on Engadget on Tue, 07 Dec 2010 08:54:00 EDT. Please see our terms for use of feeds.

Permalink Joystiq  |  sourcePlayStation Blog  | Email this | Comments
Engadget

Related Posts:

Wow error 132 fix for patch 3.3.5?

Question by muntaserabdullah: Wow error 132 fix for patch 3.3.5?
i updated wow to patch 3.3.5 and now i am getting error 132. I already posted it on blizard but they never gave me an answer yet.here are my wow and system notes
==============================================================================
World of WarCraft (build 12213)

Exe: C:\Program Files\World of Warcraft\WoW.exe
Time: Jun 22, 2010 3:07:42.765 PM
User: Abdullah
Computer: DV5000
——————————————————————————

This application has encountered a critical error:

ERROR #132 (0×85100084) Fatal Exception
Program:C:\Program Files\World of Warcraft\WoW.exe
Exception:0×80000003 (BREAKPOINT) at 001B:0095D396

WoWBuild: 12213
Settings:
SET locale “enUS”
SET realmList “us.logon.worldofwarcraft.com”
SET patchlist “us.version.worldofwarcraft.com”
SET hwDetect “0″
SET gxRefresh “60″
SET gxMultisampleQuality “0.000000″
SET gxFixLag “0″
SET videoOptionsVersion “3″
SET textureFilteringMode “0″
SET showToolsUI “1″
SET Sound_OutputDriverName “System Default”
SET MaxLights “1″
SET farclip “200.000000″
SET particleDensity “0.7″
SET baseMip “1″
SET projectedTextures “1″

—————————————-
GxInfo
—————————————-
GxApi: D3D9
Adapter Count: 1

Adapter 0 (primary):
Driver: igxprd32.dll
Version: 6.14.0010.4670
Description: Mobile Intel(R) 945GM Express Chipset Family
DeviceName: \.\DISPLAY1

——————————————————————————

—————————————-
x86 Registers
—————————————-

EAX=0A39004C EBX=015FFD6C ECX=00D3F710 EDX=181E085C ESI=0A39004C
EDI=009F42FC EBP=015FF6EC ESP=015FF6EC EIP=0095D396 FLG=00200206
CS =001B DS =0023 ES =0023 SS =0023 FS =003B GS =0000

—————————————-
Stack Trace (Manual)
—————————————-

Address Frame Logical addr Module

Showing 14/14 threads…

— Thread ID: 5008 [Current Thread] —
0095D396 015FF6EC 0001:0055C396 C:\Program Files\World of Warcraft\WoW.exe
00814990 015FFD40 0001:00413990 C:\Program Files\World of Warcraft\WoW.exe
004DAFE0 015FFE08 0001:000D9FE0 C:\Program Files\World of Warcraft\WoW.exe
004DC2A2 015FFE50 0001:000DB2A2 C:\Program Files\World of Warcraft\WoW.exe
004041F4 015FFE90 0001:000031F4 C:\Program Files\World of Warcraft\WoW.exe
0047D992 015FFEB8 0001:0007C992 C:\Program Files\World of Warcraft\WoW.exe
0047F0CA 015FFF0C 0001:0007E0CA C:\Program Files\World of Warcraft\WoW.exe
0047F111 015FFF24 0001:0007E111 C:\Program Files\World of Warcraft\WoW.exe
00406D98 015FFFC0 0001:00005D98 C:\Program Files\World of Warcraft\WoW.exe
7C817077 015FFFF0 0001:00016077 C:\WINDOWS\system32\kernel32.dll

— Thread ID: 7060 —
77DF8631 0A30FFB4 0001:00027631 C:\WINDOWS\system32\ADVAPI32.dll
7C80B729 0A30FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

— Thread ID: 7804 —
7C802455 0A68FF40 0001:00001455 C:\WINDOWS\system32\kernel32.dll
00438525 0A68FF60 0001:00037525 C:\Program Files\World of Warcraft\WoW.exe
0044DEAA 0A68FF74 0001:0004CEAA C:\Program Files\World of Warcraft\WoW.exe
0088C75F 0A68FFAC 0001:0048B75F C:\Program Files\World of Warcraft\WoW.exe
0088C804 0A68FFEC 0001:0048B804 C:\Program Files\World of Warcraft\WoW.exe

— Thread ID: 7872 —
7C802455 023BFB60 0001:00001455 C:\WINDOWS\system32\kernel32.dll
0086B40D 023BFB6C 0001:0046A40D C:\Program Files\World of Warcraft\WoW.exe
004BAFCD 023BFF8C 0001:000B9FCD C:\Program Files\World of Warcraft\WoW.exe
0077057B 023BFFB4 0001:0036F57B C:\Program Files\World of Warcraft\WoW.exe
7C80B729 023BFFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

— Thread ID: 3068 —
7C80A115 066EFF88 0001:00009115 C:\WINDOWS\system32\kernel32.dll
72D2312A 066EFFB4 0001:0000212A C:\WINDOWS\system32\wdmaud.drv
7C80B729 066EFFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

— Thread ID: 2560 —
7C80A115 06EEFE40 0001:00009115 C:\WINDOWS\system32\kernel32.dll
73F114A2 06EEFE58 0001:000004A2 C:\WINDOWS\system32\dsound.dll
73F12862 06EEFF78 0001:00001862 C:\WINDOWS\system32\dsound.dll
73F198DF 06EEFF98 0001:000088DF C:\WINDOWS\system32\dsound.dll
73F12896 06EEFFB4 0001:00001896 C:\WINDOWS\system32\dsound.dll
7C80B729 06EEFFEC 0001:0000A729 C:\WINDOWS\system32&#
its not because the server is down…..
while i try to start up wow it crashes i never got to the logon screen

Best answer:

Answer by Christy
its still down they extended maintenance
it said 11;00 now it says 1;00 thats 3;00 for me so another 30 min or so

Give your answer to this question below!

Incoming search terms:

Related Posts:

Featured Products

Archive
Gruvisoft Donations