* Patches from Microsoft, Trustix, Gentoo, others * Top 10 viruses reported over the past 7 days, according to Trend Micro * Pirates work around Vista's activation feature, and other interesting reading
Today’s bug patches and security alerts:
Microsoft readies Windows, Visual Studio security fixes
Microsoft plans to patch its Windows and Visual Studio products next week, but it does not have a fix in the works for a widely publicized flaw in Word, which hackers reportedly are exploiting in targeted attacks. IDG News Service, 12/07/06.
Security hole found in Windows Media Player
Users are being advised to disable a certain type of file in Microsoft Corp.’s Windows Media Player software following the discovery of a new security hole in the software. The flaw, which affects Windows Media Player versions 9 and 10, could allow a malicious hacker to run unauthorized software on a victim’s PC or cause a denial of service attack, according to security company FrSIRT, which rated the problem critical in an advisory Thursday. IDG News Service, 12/08/06.
**********
New Truxtix ‘multi’ update fixes two applications
A new update from Trustix fixes flaws in GnuPG and ProFTPD. Both applications are vulnerable to attacks that could lead to malicious code being executed on an affected machine.
**********
Three new fixes from Gentoo:
WV (multiple buffer overflows)
xine-lib (buffer overflow, code execution)
**********
Two new updates from OpenPKG:
**********
Three new patches from Debian:
l2tpns (buffer overflow, code execution)
**********
Three updates from Ubuntu:
evince-gtk (buffer overflow, code execution)
**********
Top 10 viruses reported over the past 7 days, according to Trend Micro:
1. Troj_Generic (17,151)
2. Worm_Nyxem.E (10,198)
3. Html_Netsky.P (7,465)
4. Worm_Netsky.Dam (7,025)
5. Worm_Anig.A (6,808)
6. Adw_Websearch.K (5,243)
7. Pe_Parite.A (3,806)
8. Worm_Rontkbr.Gen (3,656)
9. Worm_Mofei.B (3,396)
10. Troj_Small.Y (3,337)
**********
From the interesting reading department:
Pirates work around Vista’s activation feature
Hackers are distributing a file that they say lets users of the corporate version of Microsoft Corp.’s Windows Vista operating system get around the software’s anti-piracy mechanisms. IDG News Service, 12/08/06.
Florida man pleads guilty in DDOS attack
A 32-year-old Florida man pleaded guilty Wednesday in federal court to hacking into computer systems at two major universities as part of plot to launch a distributed denial-of-service (DDOS) attack on computer servers managed by Akamai Technologies, according to the U.S. attorney’s office in Boston. Computerworld, 12/08/06
