Détails [Sécurité](https://www.crashdebug.fr/informatique/securite) Jung William 22 Juillet 2010 Création : 22 Juillet 2010 Mis à jour : 12 Janvier 2015 Clics : 912 # [ The Secunia Weekly Advisory Summary 2010-07-15 - 2010-07-22 ](https://www.crashdebug.fr/the-secunia-weekly-advisory-summary-2010-07-15-2010-07-22 "The Secunia Weekly Advisory Summary 2010-07-15 - 2010-07-22 ") 0.0 of 5 (0 Votes) Temps de lecture : **5 min** Les failles de cette semaine sont: **1. \[SA40026\] Adobe Flash Player Multiple Vulnerabilities** *Si vous n'avez pas mis a jour votre Flash,* *[Installation Flash Player](http://get.adobe.com/fr/flashplayer/)* **2. \[SA40479\] Google Chrome Multiple Vulnerabilities** *Google Chrome pas de solution* **3. \[SA37255\] Sun Java JDK / JRE Multiple Vulnerabilities** *Toujours la même histoire pas de solution* **4. \[SA40566\] Microsoft Office Outlook Linked Attachment Verification Vulnerability** *Solution Windows Update* **5. \[SA24314\] Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability** *Solution de pas surfer sur les site incriminés.* **6. \[SA40034\] Adobe Reader/Acrobat Multiple Vulnerabilities** *Update* **7. \[SA40554\] Microsoft Office Access ActiveX Controls Two Vulnerabilities** *Windows Update* **8. \[SA39925\] Mozilla Firefox Error Handling Information Disclosure Vulnerability** *Update* **9. \[SA40298\] Microsoft Windows MFC Document Title Updating Buffer Overflow** *Solution: Restrict access to applications allowing user-controlled input to be passed to the vulnerable function.* **10. \[SA40076\] Microsoft Windows Help and Support Center URL Processing Vulnerability** *Windows Update* ![virus.jpg](https://www.crashdebug.fr/media/plg_jspeed/cache/images/35c5141928e63dbb50256dd6669e6905a88f0172.webp) ======================================================================== The Secunia Weekly Advisory Summary 2010-07-15 - 2010-07-22 This week: 32 advisories ======================================================================== Table of Contents: 1.....................................................Word From Secunia 2....................................................This Week In Brief 3...............................This Weeks Top Ten Most Read Advisories 4..................................................This Week in Numbers ======================================================================== 1\) Word From Secunia: "From 2007 to 2009 vulnerabilities in a typical end-user PC almost doubled from about 220 to 420." Non-Microsoft software to blame for increase in vulnerabilities affecting typical Windows end-users, read more: [http://secunia.com/gfx/pdf/Secunia\_Half\_Year\_Report\_2010.pdf](http://secunia.com/gfx/pdf/Secunia_Half_Year_Report_2010.pdf) ======================================================================== 2\) This Week in Brief: A vulnerability has been reported in Windows, which can be exploited by malicious people to compromise a user's system. A vulnerability has been reported in Apple iTunes, which can be exploited by malicious people to compromise a user's system. ======================================================================== 3\) This Weeks Top Ten Most Read Advisories: For more information on how to receive alerts on these vulnerabilities, subscribe to the Secunia business solutions: [http://secunia.com/advisories/business\_solutions/](http://secunia.com/advisories/business_solutions/) 1\. \[SA40026\] Adobe Flash Player Multiple Vulnerabilities 2\. \[SA40479\] Google Chrome Multiple Vulnerabilities 3\. \[SA37255\] Sun Java JDK / JRE Multiple Vulnerabilities 4. \[SA40566\] Microsoft Office Outlook Linked Attachment Verification Vulnerability 5\. \[SA24314\] Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability 6\. \[SA40034\] Adobe Reader/Acrobat Multiple Vulnerabilities 7\. \[SA40554\] Microsoft Office Access ActiveX Controls Two Vulnerabilities 8\. \[SA39925\] Mozilla Firefox Error Handling Information Disclosure Vulnerability 9\. \[SA40298\] Microsoft Windows MFC Document Title Updating Buffer Overflow 10\. \[SA40076\] Microsoft Windows Help and Support Center URL Processing Vulnerability ======================================================================== 4\) This Week in Numbers During the past week 32 Secunia Advisories have been released. All Secunia customers have received immediate notification on the alerts that affect their business. This weeks Secunia Advisories had the following spread across platforms and criticality ratings: Platforms: Windows : 6 Secunia Advisories Unix/Linux : 7 Secunia Advisories Other : 1 Secunia Advisory Cross platform : 18 Secunia Advisories Criticality Ratings: Extremely Critical : 0 Secunia Advisories Highly Critical : 5 Secunia Advisories Moderately Critical : 15 Secunia Advisories Less Critical : 10 Secunia Advisories Not Critical : 2 Secunia Advisories ======================================================================== Secunia recommends that you verify all advisories you receive, by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. Definitions: (Criticality, Where etc.) [http://secunia.com/advisories/about\_secunia\_advisories/](http://secunia.com/advisories/about_secunia_advisories/) Subscribe: [http://secunia.com/advisories/weekly\_summary/](http://secunia.com/advisories/weekly_summary/) Contact details: Web : E-mail : [Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.](mailto:support@secunia.com) Tel : +45 70 20 51 44 Fax : +45 70 20 51 45 ======================================================================== Vous aimez ce que vous lisez ? Notre travail est gratuit et indépendant, mais il a un coût. Vous pouvez nous soutenir librement grâce à un don via *[Tipeee](https://fr.tipeee.com/crashdebug-fr)* ou *[PayPal](https://www.paypal.com/paypalme/Crashdebug)*. Si vous ne pouvez pas nous aider financièrement (ce que je peux comprendre parfaitement), vous pouvez partager les articles sur vos réseaux sociaux, et parler du site autour de vous. Merci à celles et ceux qui rendent tout cela possible. [![Google](https://www.google.com/images/branding/googleg/1x/googleg_standard_color_128dp.png)Ajouter Crashdebug.fr à Google](https://www.google.com/preferences/source?q=crashdebug.fr) ## Partager sur les réseaux sociaux [ Publier 0Nombre de partages sur X ](https://twitter.com/share?url=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-15-2010-07-22&text=The%20Secunia%20Weekly%20Advisory%20Summary%20%202010-07-15%20-%202010-07-22)0Nombre de partages sur X [ Partager 0Nombre de partages sur Facebook ](https://facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-15-2010-07-22)0Nombre de partages sur Facebook [ Partager 0Nombre de partages sur Linkedin ](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-15-2010-07-22&text=The%20Secunia%20Weekly%20Advisory%20Summary%20%202010-07-15%20-%202010-07-22%20%20%20%20)0Nombre de partages sur Linkedin [ E-mail 0Nombre de partages sur Email ](mailto:?subject=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-15-2010-07-22&body=The%20Secunia%20Weekly%20Advisory%20Summary%20%202010-07-15%20-%202010-07-22%20%20%20%20)0Nombre de partages sur Email [ WhatsApp 0Nombre de partages sur Whatsapp ](https://web.whatsapp.com/send?text=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-15-2010-07-22%20The%20Secunia%20Weekly%20Advisory%20Summary%20%202010-07-15%20-%202010-07-22%20%20%20%20)0Nombre de partages sur Whatsapp [ Télégramme 0Nombre de partages sur Telegram ](https://t.me/share/url?url=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-15-2010-07-22&text=The%20Secunia%20Weekly%20Advisory%20Summary%20%202010-07-15%20-%202010-07-22%20%20%20%20)0Nombre de partages sur Telegram --- [ Previous ](https://www.crashdebug.fr/mesdames-mefiez-vous-des-cyber-casanova "Mesdames, méfiez-vous des cyber Casanova") [ Next ](https://www.crashdebug.fr/relizlab-le-site-russe-qui-rend-dingue-les-majors-hollywoodiennes "Relizlab, le site russe qui rend dingue les majors hollywoodiennes") ![loader](https://www.crashdebug.fr/media/com_rscomments/images/loader.gif) [ My comments ](https://www.crashdebug.fr/javascript:void(0); "This will show all of your comments.") [ Subscribe ](https://www.crashdebug.fr/javascript:void(0) "Subscribe") [](https://www.crashdebug.fr/javascript:void(0); "Bold") [](https://www.crashdebug.fr/javascript:void(0); "Italic") [](https://www.crashdebug.fr/javascript:void(0); "Underline") [](https://www.crashdebug.fr/javascript:void(0); "Stroke") [](https://www.crashdebug.fr/javascript:void(0); "Quote") [](https://www.crashdebug.fr/javascript:void(0); "Emoticons") [](https://www.crashdebug.fr/javascript:void(0); "Preview") [![:confused:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/confused.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:cool:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/cool.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:cry:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/cry.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:laugh:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/laugh.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:lol:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/lol.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:normal:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/normal.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:blush:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/redface.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:rolleyes:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/rolleyes.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:sad:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/sad.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:shocked:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/shocked.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:sick:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/sick.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:sleeping:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/sleeping.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:smile:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/smile.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:surprised:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/surprised.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:tongue:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/tongue.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:unsure:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/unsure.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:whistle:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/whistling.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:wink:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/wink.gif)](https://www.crashdebug.fr/javascript:void(0);) [](https://www.crashdebug.fr/javascript:void(0); "Close preview") ![loader](https://www.crashdebug.fr/media/com_rscomments/images/loader.gif) 1000 Characters left --- Subscribe [ I agree to the terms and conditions. ](https://www.crashdebug.fr/javascript:void(0)) I consent to this website collecting my details through this form. ![captcha](https://www.crashdebug.fr/component/rscomments/captcha?type=formca045befef2228232dd7baba1867f6bd&sid=6ac7cbd89b80f&Itemid=56 "The captcha code is case insensitive.") [ ](https://www.crashdebug.fr/javascript:void(0)) ![loader](https://www.crashdebug.fr/media/com_rscomments/images/loader.gif) ### Terms & Conditions [I Agree](https://www.crashdebug.fr/javascript:void(0))[Close](https://www.crashdebug.fr/javascript:void(0)) ### Subscribe ### Report ### My comments