Tuesday, July 14, 2009

Vulnerabilities Addressed in Firefox and Microsoft

Reports abound on the internet about vulnerabilities in Firefox and Microsoft. U.S. Computer Emergency Response Team (CERT) reports that there is a vulnerability in Firefox 3.5 that addresses the particular way that Java is processed allowing hackers the ability to execute arbitrary code; this vulnerability is deemed "Highly Critical". CERT also reports that the 'exploit code is publicly available online'. Furthermore, CERT 'encourages users and administrators to disable javascript to help mitigate the vulnerability as described in their "Securing Your Web Browser" article'.

Microsoft is about to address vulnerabilities in their July patch, addressing nine (9) vulnerabilities; three (3) are reported as "Critical" while another three (3) are reported as "Important" on Microsoft's website. The affected Microsoft products include: Windows, Microsoft Office, Internet Security and Acceleration(ISA) Server, Virtual PC and Virtual Server.

Two of the vulnerabilities address ActiveX Control and DirectShow component; Microsoft warned about this "browse-and-get-owned" vulnerability in May and June.

*** Another interesting fact is that after a fresh Vista 64-bit install with all the updates completed about 24 hours ago went well with a Dell XPS M1330, Microsoft informed me that no updates had ocurred and after downloading the updates, the Laptop would not boot in Normal mode nor Safe mode.

Obviously there is a flaw in the 64-bit Vista version and updates in regards to Dell Laptop M1330 series; PC Virus Doctors are not "happy campers".

July 15th update: Miraculously the above laptop problem was resolved. Now PC Virus Doctors are happy campers...we have never experienced such a "hiccup". The laptop booted well and behaved well with testing. Yeah!!!

No comments: