======================================================================== The Secunia Weekly Advisory Summary 2011-08-04 - 2011-08-11 This week: 53 advisories ======================================================================== Table of Contents: 1.....................................................Word From Secunia 2....................................................This Week In Brief 3...............................This Weeks Top Ten Most Read Advisories 4................................................Secunia Community News 5................................................Secunia Corporate News 6..................................................This Week in Numbers ======================================================================== 1) Word From Secunia: Try the new Secunia CSI 5.0 beta - Scan your Mac & integrate with the Secunia PSI, plus more Our customers and our community are always an important part of our solutions. The crucial feedback received during the beta testing process allows us to continually improve and offer true value. Would you or a colleague like to become a beta tester? If so, click here: http://secunia.com/products/corporate/CSI/beta_trial/ Feedback can also be shared on our community forums here: http://secunia.com/community/forum/ ======================================================================== 2) This Week in Brief: Multiple vulnerabilities have been reported in Google Chrome, which can be exploited by malicious people to disclose sensitive information and compromise a user's system. http://secunia.com/advisories/45529/ -- Multiple vulnerabilities have been reported in Adobe Flash Player, which can be exploited by malicious people to disclose sensitive information and compromise a user's system. http://secunia.com/advisories/45583/ -- Two vulnerabilities have been reported in Microsoft Visio, which can be exploited by malicious people to compromise a user's system. http://secunia.com/advisories/45346/ -- Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system. http://secunia.com/advisories/45552/ -- A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system. http://secunia.com/advisories/45246/ -- Two vulnerabilities have been reported in McAfee SaaS Endpoint Protection, which can be exploited by malicious people to compromise a user's system. http://secunia.com/advisories/45506/ -- High-Tech Bridge SA has reported multiple vulnerabilities in ThreeDify Designer, which can be exploited by malicious people to manipulate certain data and compromise a user's system. http://secunia.com/advisories/45511/ ======================================================================== 3) This Weeks Top Ten Most Read Advisories: For more information on how to receive alerts on these vulnerabilities, subscribe to the Secunia business solutions: http://secunia.com/advisories/business_solutions/ 1. [SA45516] Apple QuickTime Multiple Vulnerabilities 2. [SA45498] Google Chrome Multiple Vulnerabilities 3. [SA45173] Sun Java JRE Insecure Executable Loading Vulnerability 4. [SA45475] Microsoft Windows CSRSS "SrvGetConsoleTitle()" Type Casting Weakness 5. [SA45583] Adobe Flash Player Multiple Vulnerabilities 6. [SA45501] Bugzilla Multiple Vulnerabilities 7. [SA45552] Microsoft Windows DNS Service Two Vulnerabilities 8. [SA45502] Zabbix "backurl" Cross-Site Scripting Vulnerability 9. [SA45511] ThreeDify Designer ActiveX Control Insecure Method and Buffer Overflow Vulnerabilities 10. [SA44964] Adobe Flash Player Unspecified Memory Corruption Vulnerability ======================================================================== 4) Secunia Community News InformationWeek: Security Vulnerabilities 'Security Vulnerabilities: Warnings, Patches Released Same Day' focuses on the rise of coordinated disclosures, local network attacks, and critical vulnerabilities. InformationWeek discusses this topic with Secunia: http://secunia.com/company/blog_news/articles/245 'Not Running Secunia PSI? Why Not?' Bill Mullins, computer expert and industry blogger, compares leaving a PC unpatched with the behaviour of his security ignorant neighbour: http://secunia.com/company/blog_news/articles/244 ======================================================================== 5) Secunia Corporate News Pre-emptive action against vulnerabilities - a priority for effective security strategies The Secunia VIM enables you to simplify and strategize your handling of emerging threats. Read more and request a free trial: http://secunia.com/products/corporate/vim/ ======================================================================== 6) This Week in Numbers During the past week 53 Secunia Advisories have been released. All Secunia customers have received immediate notification on the alerts that affect their business. This weeks Secunia Advisories had the following spread across platforms and criticality ratings: Platforms: Windows : 8 Secunia Advisories Unix/Linux : 19 Secunia Advisories Other : 3 Secunia Advisories Cross platform : 23 Secunia Advisories Criticality Ratings: Extremely Critical : 0 Secunia Advisories Highly Critical : 8 Secunia Advisories Moderately Critical : 22 Secunia Advisories Less Critical : 19 Secunia Advisories Not Critical : 4 Secunia Advisories ======================================================================== Secunia recommends that you verify all advisories you receive, by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Subscribe: http://secunia.com/advisories/weekly_summary/ Contact details: Web : http://secunia.com/ E-mail : support_at_private Tel : +45 70 20 51 44 Fax : +45 70 20 51 45 ___________________________________________________________ Tegatai Managed Colocation: Four Provider Blended Tier-1 Bandwidth, Fortinet Universal Threat Management, Natural Disaster Avoidance, Always-On Power Delivery Network, Cisco Switches, SAS 70 Type II Datacenter. Find peace of mind, Defend your Critical Infrastructure. http://www.tegataiphoenix.com/Received on Fri Aug 12 2011 - 00:14:24 PDT
This archive was generated by hypermail 2.2.0 : Fri Aug 12 2011 - 00:32:00 PDT