Old flaw haunts new IE browser

Opinion
Oct 30, 20062 mins

* Patches from rPath, Mandriva, others * Top 10 reported virus infections for the past week from Trend Micro * Seagate tries again with encrypted drive, and other interesting reading

Before we get to the business of the day, a couple fun items for Halloween:

Executive Editor Adam Gaffin ran a Halloween Costume contest last week. Check out the winner.

Not to be outdone, our Art Department came up with a few costume ideas of their own.

Finally, if you’re into horror movies and fiction, check out this week’s Twisted Pair Podcast. Keith and I talk with NW Horrormeister John Gallant about what’s scary and what’s not.

Today’s bug patches and security alerts:

Microsoft’s new browser haunted by old flaw

A security problem originally found in Microsoft’s Internet Explorer 6 browser has returned to haunt IE7, the new version of the browser launched two weeks ago, a security consultant said Monday. IDG News Service, 10/30/06.

Secunia advisory

**********

New patches from rPath:

kdelibs and kdelibs qt-x11-free (integer overflow, denial of service)

Screen (denial of service)

**********

New patches from Mandriva:

Ruby (denial of service)

Screen (denial of service)

mutt (race condition, code execution)

xsupplicant (stack overflow, root privileges)

mono (temp files, code execution)

**********

Top 10 reported virus infections for the past week, according to Trend Micro:

1. Worm_Nyxem.E (9,478)

2. HTML_Netsky.P (7,906)

3. Worm_Netsky.Dam (6,965)

4. Worm_Anig.A (4,299)

5. Pe_Parite.A (3,991)

6. Pak_Generic.001 (3,591)

7. Worm_Rontkbr.Gen (3,358)

8. Bkdr_Generic (3,276)

9. Java_Bytever.A (2,948)

10. Expl_Wmf.Gen (2,901)

**********

From the interesting reading department:

Mismatched job titles

What’s in a title? When you work in IT, apparently, not much. Network World, 10/30/06.

Seagate tries again with encrypted drive

Beginning early next year, Seagate Technology will begin shipping its first widely available hard drives with built-in encryption. IDG News Service, 10/29/06.

VoIP, hackers, botnets among challenges cyberprotectors face

A legal system rife with outdated laws never designed to cope with such new technologies as VoIP is just one of the worries facing Stephen Treglia, chief of the technology crime unit in the district attorney’s office of New York’s Nassau County. Network World, 10/30/06.

Workshare extends content security

Workshare this week unveiled software designed to help companies keep sensitive information from being copied or distributed without authorization via portable devices. Network World, 10/30/06.