NEWS
SOFTWARE SEARCH: |
Latest Stories
ActiveX Is Vulnerable to Attacks Even Without Vulnerabilities
Internet Explorer users are vulnerable to attacks targeting ActiveX, even when ActiveX is vulnerability-free, claims security company Symantec. According to Symantec's Sean Hittel, attackers have found a way to essentially serve users the vulnerability prior to exploiting it. Targeted is a critical security flaw in the ActiveX Control for the Snapshot Viewer for Microsoft Access. Microsoft has patched the vulnerability via a security bulletin issued in July 2008, but the update was deployed only on the systems with the software installed. Symantec claims that all Internet Explorer users are vulnerable to the issue.
Adobe Fights Against Facebook and MySpace Worm
One of Adobe's applications, Flash player, is used by two versions of a malicious software in order to infect the computers of Facebook and MySpace social networks users. Users are taken to certain fake websites that promise to reveal exclusive videos of celebrities or hidden-camera footage showing the users themselves in embarrassing situations. When they try to see the videos, they are informed that they don't have the latest version of Flash Player, which is necessary to watch them. "Your version of Flash player is out of date. Please download this update." reads the message they receive. Should the name of the file that claims to be an update raise no suspicions with the users, codecsetup.exe, the "download" ends with the infection of the computer. So as to prevent its name from being further associated, in one way or another, with the web-based attacks, Adobe has decided to take action. Therefore, it strongly recommends users not to download products that apparently belong to them from any third party source.
Visual Studio 2008 SP1 Available for Download
Developers leveraging Visual Studio 2008 and .NET Framework 3.5 are in for a treat in terms of the tools available for building what Microsoft referred to as client, web and data-driven applications. This because the Redmond giant just released to the Microsoft Download Center the Service Pack 1 for .NET Framework 3.5 and also for Visual Studio 2008. Even though Microsoft officially announced only the releasing to manufacturing of the two service packs, the gold builds of Visual Studio 2008 SP1 and .NET Framework 3.5 are available for download.