The Secunia Weekly Advisory Summary 29-07-2010

Le bulletin sécurité de Secunia où on apprend que Charlie Miller a découvert deux failles de sécurités dans OpenOffice.org qui peuvent être exploitées par des gens 'malicieux'... et d'autres surprises dont je vous détaille les recours ci-dessous....

Charlie Miller has discovered two vulnerabilities in OpenOffice.org Impress, which can be exploited by malicious people to compromise a user's system.

3) This Weeks Top Ten Most Read Advisories:

For more information on how to receive alerts on these vulnerabilities, subscribe to the Secunia business solutions:

http://secunia.com/advisories/business_solutions/

1. [SA40729] QuickTime Player Streaming Debug Error Logging Buffer

2.
[SA40026] Adobe Flash Player Multiple Vulnerabilities 3.

Les version 10.0.45.2 et en dessous sont exploité la version 10.1 et au delà ne sont pas exploité mettre a jour

[SA40647] Microsoft Windows Shell Shortcut Parsing Vulnerability

Utilisez Windows Update pour mettre a jour votre système

4. [SA40766] Adobe Reader/Acrobat Font Parsing Integer Overflow

Ne pas ouvrir de fichier PDF non sur

5. [SA24314] Internet Explorer Charset Inheritance Cross-Site

6. [SA37255] Sun Java JDK / JRE Multiple Vulnerabilities 7. [SA40743] Google Chrome Multiple Vulnerabilities 8. [SA38830] Symantec Products File Parsing Multiple Vulnerabilities 9. [SA40807] Apple iOS Security Bypass and PDF File Processing

Mise a jour

10. [SA40720] Mozilla Firefox Plugin Parameter Array Dangling Pointer

Mise a jour

========================================================================

The Secunia Weekly Advisory Summary

2010-07-29 - 2010-08-05

This week: 77 advisories

========================================================================

Table of Contents:

1.....................................................Word From Secunia

2....................................................This Week In Brief

3...............................This Weeks Top Ten Most Read Advisories

4..................................................This Week in Numbers

========================================================================

1) Word From Secunia:

"From 2007 to 2009 vulnerabilities in a typical end-user PC almost doubled from about 220 to 420."

Non-Microsoft software to blame for increase in vulnerabilities affecting typical Windows end-users, read more:

http://secunia.com/gfx/pdf/Secunia_Half_Year_Report_2010.pdf

========================================================================

2) This Week in Brief:

Charlie Miller has discovered a vulnerability in Adobe Reader / Acrobat, which can be exploited by malicious people to compromise a user's system.

http://secunia.com/advisories/40766

http://secunia.com/advisories/40775

========================================================================

3) This Weeks Top Ten Most Read Advisories:

For more information on how to receive alerts on these vulnerabilities, subscribe to the Secunia business solutions:

http://secunia.com/advisories/business_solutions/

1. [SA40729] QuickTime Player Streaming Debug Error Logging Buffer

Overflow

2. [SA40026] Adobe Flash Player Multiple Vulnerabilities 3. [SA40647] Microsoft Windows Shell Shortcut Parsing Vulnerability 4. [SA40766] Adobe Reader/Acrobat Font Parsing Integer Overflow

Vulnerability

5. [SA24314] Internet Explorer Charset Inheritance Cross-Site

Scripting Vulnerability

Vulnerability

10. [SA40720] Mozilla Firefox Plugin Parameter Array Dangling Pointer

Vulnerability

========================================================================

4) This Week in Numbers

During the past week 77 Secunia Advisories have been released. All Secunia customers have received immediate notification on the alerts that affect their business.

This weeks Secunia Advisories had the following spread across platforms and criticality ratings:

Platforms:

Windows : 15 Secunia Advisories

Unix/Linux : 37 Secunia Advisories

Other : 12 Secunia Advisories

Cross platform : 13 Secunia Advisories

Criticality Ratings:

Extremely Critical : 0 Secunia Advisories

Highly Critical : 17 Secunia Advisories

Moderately Critical : 23 Secunia Advisories

Less Critical : 26 Secunia Advisories

Not Critical : 11 Secunia Advisories

========================================================================

Secunia recommends that you verify all advisories you receive, by clicking the link.

Secunia NEVER sends attached files with advisories.

Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Definitions: (Criticality, Where etc.)

http://secunia.com/advisories/about_secunia_advisories/

Subscribe:

http://secunia.com/advisories/weekly_summary/

Contact details:

Web : http://secunia.com/

E-mail : Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.

Tel : +45 70 20 51 44

Fax : +45 70 20 51 45

========================================================================

Ne pas surfer sur les sites incriminés

Pas de solution

Vous aimez ce que vous lisez ? Notre travail est gratuit et indépendant, mais il a un coût. Vous pouvez nous soutenir librement grâce à un don via Tipeee ou PayPal. Si vous ne pouvez pas nous aider financièrement (ce que je peux comprendre parfaitement), vous pouvez partager les articles sur vos réseaux sociaux, et parler du site autour de vous. Merci à celles et ceux qui rendent tout cela possible.

Ajouter Crashdebug.fr à Google