Video | Business Headlines | Internet | Science | Scientific Ethics | Technology | Search

 


Three new security bulletins - 13 July 2005

Three new security bulletins - 13 July 2005

Today, Microsoft issued three new security bulletins. Symantec Security response identified the following two vulnerabilities to be the most serious.

Buffer Overflow in Microsoft Colour Management Module

Microsoft has announced a security patch for a vulnerability within the Microsoft Colour Management Module (CMM), a component included within most Windows systems. CMM processes image files for a wide variety of formats including JPEG, EXIF, TIFF, PNG, PDF, PICT, PostScript, JDF (Job Definition Format), SVG, and CSS3. This vulnerability may be exploited remotely through malicious web sites or emails. It may be possible to exploit Outlook users by just previewing the email. Other applications that use CMM could be vulnerable as well, including Internet Explorer and MSN Messenger. Symantec Security Response has rated this threat as critical.

Microsoft Internet Explorer Javaprxy.DLL COM Object Heap Overflow

Microsoft has also introduced a security patch for a vulnerability in Javaprxy.dll, an interface to a debugger in the Microsoft Java Virtual Machine. An attacker could exploit this vulnerability through malicious web pages and run code on the local system resulting in complete control of the affected computer. Symantec Security Response has rated this threat as critical.

"While these are high-risk vulnerabilities, there are many steps users can take to protect themselves," said Oliver Friedrichs, senior manager, Symantec Security Response. "In addition to applying patches immediately, users should never open files or click on links from unknown sources. Computer users should keep software running with the least privileges possible and deploy network intrusion detection systems to monitor network traffic for signs of suspicious activity."

Symantec recommends the following actions for enterprises: · Evaluate the possible impact of these vulnerabilities to their critical systems. · Plan for required responses including patch deployment and implementation of security best practices using the appropriate security solutions. · Take proactive steps to protect the integrity of networks and information. · Verify that appropriate data backup processes and safeguards are in place and effective. · Remind users to exercise caution in opening all unknown or unexpected email attachments and in following web links from unknown or unverified sources.

Symantec recommends the following actions for consumers: · Regularly run Windows Update and install the latest security updates to keep software up to date. · Avoid opening unknown or unexpected email attachments or following web links from unknown or unverified sources. · Consider using an internet security solution such as Norton Internet Security 2005 AntiSpyware Edition to protect against today's known and tomorrow's unknown threats.

Additional information can be found at: http://www.microsoft.com/technet/security/bulletin/ms05-jul.mspx

Symantec’s security experts will closely monitor further information related to these vulnerabilities and will provide updates and security content as necessary.

ENDS

© Scoop Media

 
 
 
 
 
Business Headlines | Sci-Tech Headlines

 

Half Empty: Fonterra's 2017 Opening Forecast Below Expectations

Fonterra Cooperative Group raised its forecast farmgate milk payout for next season by less than expected as the world's largest dairy exporter predicts lower prices will crimp production and supply will pick up. The New Zealand dollar fell. More>>

ALSO:

Pest Control: Mouse Blitz Team Leaves For Antipodes

The Million Dollar Mouse project to rid Antipodes Island of mice is underway with the departure of a rodent eradication team to the remote nature reserve and World Heritage Area. More>>

Gongs Got: Canon Media Awards & NZ Radio Awards Happen

Radio NZ: RNZ website The Wireless, which is co-funded by NZ On Air, was named best website, while Toby Manhire and Toby Morris won the best opinion general writing section for their weekly column on rnz.co.nz and Tess McClure won the best junior feature writer section. More>>

ALSO:

Pre-Budget: Debt Focus Risks Losing Opportunity To Stoke Economy

The Treasury is likely to upgrade its forecasts for economic growth in Budget 2016 next week but Finance Minister Bill English has already signalled that more of his focus is on debt repayment than on fiscal stimulus or tax cuts... More>>

ALSO:

Fulton Hogan's Heroes: Managing Director Nick Miller Resigns

Fulton Hogan managing director Nick Miller will leave the privately owned construction company after seven years in charge. The Dunedin-based company has kicked off a search for a replacement, and Miller will stay on at the helm until March next year, or until a successor has been appointed and a transition period completed. More>>

ALSO:

Gordon Campbell: On Electricity, Executions, And Bob Dylan

The Electricity Authority has unveiled the final version of its pricing plan for electricity transmission. This will change the way transmission prices (which comprise about 10% of the average power bill) are computed, and will add hundreds of dollars a year to power bills for many ordinary consumers. More>>

ALSO:

Half Empty: Fonterra NZ, Australia Milk Collection Drops In Season

Fonterra Cooperative Group says milk collection is down in New Zealand and Australia, its two largest markets, in the first 11 months of the season during a period of weak dairy prices. More>>

ALSO:

Get More From Scoop

 
 
 
 
 
 
 
 
 
Sci-Tech
Search Scoop  
 
 
Powered by Vodafone
NZ independent news