* Patches from Microsoft, Gentoo, Debian, others * Beware Microsoft IM worm dubbed Heartworm * Sophos tool takes aim at unwanted applications, and other interesting reading
Today’s bug patches and security alerts:
Microsoft offers early fix for critical IE bug
With attackers finding new ways to exploit a critical flaw in Internet Explorer, Microsoft has released a patch for the problem, ahead of its next scheduled round of security updates. IDG News Service, 09/26/06.
Also:
Criminals spread Windows exploit via Web host
Attackers exploited the zero-day VML vulnerability on Windows-based machines by targeting a separate hole in cpanel, an application that’s popular with Web hosting services. InfoWorld, 09/25/06.
**********
New updates from Gentoo:
Tikiwiki (cross scripting flaw, code execution)
**********
New updates from Debian:
**********
New patches from rPath:
**********
A flaw in the way gzip handles certain compressed files could send the application into an infinite loop, resulting in a denial of service.
**********
Today’s major virus alert:
Heartworm infects Microsoft’s IM network
The latest worm to infect instant-messaging networks is aptly named Heartworm. The worm, actually called W32.heartworm.a, affects users of Microsoft’s Windows Live Messenger service (formerly MSN Messenger), presenting users with a link to a Web site that tells them a virtual greeting card is waiting for them, according to FaceTime Security Labs, a division of IM management and security company FaceTime Communications. NetworkWorld.com, 09/25/06.
**********
From the interesting reading department:
Sophos tool takes aim at unwanted applications
Sophos has announced it has added an application-control feature to its antivirus product that blocks the use of unauthorized VoIP, peer-to-peer and instant messaging applications on Windows desktops. Network World, 09/27/06.
Microsoft rolls out new data-protection software
Microsoft today announced a new version of its data-protection product, which provides near-continuous backup and recovery for Windows file servers and network-attached storage appliances. Network World, 09/27/06.
