Skip to Content

Submit your nominations for the Luxist Awards' Best in Decor
AOL Tech

flaw posts

Filed under: Internet, Security, Microsoft, Browsers

Microsoft issues patch for latest IE vulnerability

Microsoft is acting to address concerns regarding the vulnerability that has been widely reported on since it was revealed last week. According to BetaNews there still haven't been any reported incidents involving the exploit.

Even though the vulnerability's existence has yet to be confirmed, Microsoft has responded quickly and has prepared a patch for release today at 10:00am PST. There are also webcasts scheduled for December 17th and 18th to answer customer concerns regarding the out-of-band update.

For more information about the specifics of the vulnerability, read Microsoft's December 12th TechNet post. The post also details five different workarounds (which should be unnecessary once the patch is released).

It's likely that Microsoft will also update the original security advisory with a link to the patch once it has been made available.

Update:
downloads are available here - choose the link that matches your Windows OS.

[ via BetaNews ]

Filed under: Security, Windows, Symantec

Security flaw puts Symantec AntiVirus users at risk

SymantecAccording to eEye Digital Security, the latest version of Symantec AntiVirus contains a security flaw that could be used to take control of the victim's PC "without any user action." eEye spokesperson Mike Puterbaugh describes the hole as "definitely wormable," i.e. malicious software could gain access to a machine, change or delete files at will, and spread itself to other machines. Symantec says they "are evaluating the issue now and, if necessary, will provide a prompt response and solution." Puterbaugh says no proof-of-concept code has been released, but warns that hackers may already know about the flaw.

Filed under: Security, Windows, Microsoft

Another day, another WMF vulnerability

MicrosoftActually, two of them. Fortunately, this new set of vulnerabilities, discovered only days after Microsoft released a patch for the recently-discovered and very dangerous previous WMF vulnerability, is much less serious. Rather than allowing an attacker to execute arbitrary code on your system, these two new vulnerabilities only allow a malicious person to crash the viewer, e.g. Internet Explorer, if you are tricked into viewing the image. PC World has more on the new bugs, which we probably won't see a patch for until next month.
[Via Slashdot]

Featured Time Waster

Graveyard Shift - zombie-busting Time Waster

With Halloween fast approaching, it's a great time to get in some practice defending your territory against zombies. In Graveyard Shift, you take aim at zombies and other creepy-crawlies, blasting them into splatters of cartoony green guts. It's a casual first-person shooter, and it's very easy to get the hang of - use the mouse to aim, click to fire. Graveyard Shift has at least 15 levels, and it might even have some secret stages I haven't unlocked yet. They key to getting good at Graveyard Shift is learning to use ...

View more Time Wasters

Featured Galleries

Defective by Design, London: Protest Pictures
Microsoft Security Essentials
Chromium Pre-Alpha on CrunchBang Linux
Safari 4 Beta
10 Firefox themes that don't suck
IE8 RC1
Download Squad at the Crunchies After-Party
Download Squad at the Crunchies
WordPress 2.7
Cooking Mama: Mama Kills Animals
Windows 7 Hands On
Comodo Internet Security
Android First-look: Amazon.com MP3 Store
Android First-look: Twitroid
Google Reader Android
Android Hands-On
Twine 1.0
Photoshop Express Beta
Mozilla Birthday Cake
Palm stuff
Adobe Lightroom 1.1

 


Follow us on Twitter!

Flickr Pool

www.flickr.com

More Tech Coverage

AOL Radio

Joystiq

TUAW

Daily Finance

Autoblog

Urlesque

Engadget

WoW

Switched.com

FanHouse