Microsoft Updates for May

Four new security bulletins have been published (from MS08-026 to MS08-029) as part of the usual launch of Microsoft updates. We recommend you to update your systems as soon as possible, as according to Microsoft’s classification three of the bulletins are rated as “critical”, while the last one is rated as “moderate”.You can find more information about the security bulletins by clicking the following links: MS08-026: An update for Microsoft Word which solves two vulnerabilities that could allow remote code execution if a user opens a specially crafted Word file.MS08-027: An update for Microsoft Publisher which solves a vulnerability that could be exploited in order to execute arbitrary code if a user opens a malicious Publisher file.MS08-028: An update to solve a remote code execution vulnerability in Microsoft Jet Database Engine.MS08-029: A security update in order to match two vulnerabilities in the Microsoft Malware Engine, which could allow a remote attacker to cause a denial of service if a specially crafted is scanned.
original article

Posted under Malware Alerts

This post was written by Ted on May 14, 2008

Tags: ,

Microsoft Security Advisory (950627): Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution - 5/13/2008

Revision Note: May 13, 2008: Advisory updated to reflect publication of security bulletin. Advisory Summary:Microsoft has completed the investigation into public reports of this vulnerability. We have issued Microsoft Security Bulletin MS08-028 to address this issue. For more information about this issue, including download links for an available security update, please review MS08-028: Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution (950749). The vulnerability addressed is the Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability - CVE-2007-6026.

Posted under Microsoft Security Alerts

This post was written by Ted on May 14, 2008

Tags:

Firefox Vietnamese Language Pack Infected

Mozilla has published in its blog some news regarding the incidence with the Vietnamese language pack for Firefox 2.In February, a Vietnamese language pack for Firefox was published. The problem was that before being uploaded to the corresponding server, it had been already infected, as the internal code of the *.xhtml files had been modified and included the following instruction:The files which contain that malicious code are detected as W32/Xorer.T.This instruction resolves to: http://js.k0102.com/01.asp , don’t worry because this URL is currently offline.The question is: how can anybody be sure that their computer is malware free?You can check it in http://www.infectedornot.com, and scan your computer with the ActiveScan 2.0 online scanner, a security solution that operates on the basis of 'collective intelligence', which allows many more threats to be detected.
original article

Posted under Malware Alerts

This post was written by Ted on May 9, 2008

Tags: ,