Détails   [Sécurité](https://www.crashdebug.fr/informatique/securite)   Jung William    5 Août 2010     Création : 5 Août 2010     Mis à jour : 12 Janvier 2015    Clics : 942 #  [ The Secunia Weekly Advisory Summary 29-07-2010 - 05-08-2010](https://www.crashdebug.fr/the-secunia-weekly-advisory-summary-2010-07-29-2010-08-05 "The Secunia Weekly Advisory Summary 29-07-2010 - 05-08-2010")

0.0 of 5 (0 Votes)

Temps de lecture : **6 min**

Le bulletin sécurité de Secunia où on apprend que Charlie Miller a découvert deux failles de sécurités dans OpenOffice.org qui peuvent être exploitées par des gens 'malicieux'... et d'autres surprises dont je vous détaille les recours ci-dessous....

Charlie Miller has discovered two vulnerabilities in OpenOffice.org Impress, which can be exploited by malicious people to compromise a user's system.

3\) This Weeks Top Ten Most Read Advisories:

 For more information on how to receive alerts on these vulnerabilities, subscribe to the Secunia business solutions:

[http://secunia.com/advisories/business\_solutions/](http://secunia.com/advisories/business_solutions/)

1\. \[SA40729\] QuickTime Player Streaming Debug Error Logging Buffer

2\.
 \[SA40026\] Adobe Flash Player Multiple Vulnerabilities 3.

***Les version 10.0.45.2 et en dessous sont exploité la version 10.1 et au delà ne sont pas exploité*** [***mettre a jour***](http://get.adobe.com/fr/flashplayer/)

 \[SA40647\] Microsoft Windows Shell Shortcut Parsing Vulnerability

***Utilisez Windows Update pour mettre a jour votre système***

4\. \[SA40766\] Adobe Reader/Acrobat Font Parsing Integer Overflow

***Ne pas ouvrir de fichier PDF non sur***

 5. \[SA24314\] Internet Explorer Charset Inheritance Cross-Site

6\. \[SA37255\] Sun Java JDK / JRE Multiple Vulnerabilities 7. \[SA40743\] Google Chrome Multiple Vulnerabilities 8. \[SA38830\] Symantec Products File Parsing Multiple Vulnerabilities 9. \[SA40807\] Apple iOS Security Bypass and PDF File Processing

  [**Mise a jour** ](http://www.oracle.com/technetwork/java/javase/downloads/index.html)

10\. \[SA40720\] Mozilla Firefox Plugin Parameter Array Dangling Pointer

 [**Mise a jour**](http://www.mozilla-europe.org/fr/firefox/)

 ========================================================================

 The Secunia Weekly Advisory Summary

 2010-07-29 - 2010-08-05

![virus.jpg](https://www.crashdebug.fr/media/plg_jspeed/cache/images/35c5141928e63dbb50256dd6669e6905a88f0172.webp)

 This week: 77 advisories

========================================================================

Table of Contents:

1.....................................................Word From Secunia

2....................................................This Week In Brief

3...............................This Weeks Top Ten Most Read Advisories

4..................................................This Week in Numbers

========================================================================

1\) Word From Secunia:

"From 2007 to 2009 vulnerabilities in a typical end-user PC almost doubled from about 220 to 420."

Non-Microsoft software to blame for increase in vulnerabilities affecting typical Windows end-users, read more:

 [http://secunia.com/gfx/pdf/Secunia\_Half\_Year\_Report\_2010.pdf](http://secunia.com/gfx/pdf/Secunia_Half_Year_Report_2010.pdf)

========================================================================

2\) This Week in Brief:

Charlie Miller has discovered a vulnerability in Adobe Reader / Acrobat, which can be exploited by malicious people to compromise a user's system.

<http://secunia.com/advisories/40766>

<http://secunia.com/advisories/40775>

========================================================================

3\) This Weeks Top Ten Most Read Advisories:

For more information on how to receive alerts on these vulnerabilities, subscribe to the Secunia business solutions:

[http://secunia.com/advisories/business\_solutions/](http://secunia.com/advisories/business_solutions/)

1\. \[SA40729\] QuickTime Player Streaming Debug Error Logging Buffer

 Overflow

2\. \[SA40026\] Adobe Flash Player Multiple Vulnerabilities 3. \[SA40647\] Microsoft Windows Shell Shortcut Parsing Vulnerability 4. \[SA40766\] Adobe Reader/Acrobat Font Parsing Integer Overflow

 Vulnerability

5\. \[SA24314\] Internet Explorer Charset Inheritance Cross-Site

 Scripting Vulnerability

6\. \[SA37255\] Sun Java JDK / JRE Multiple Vulnerabilities 7. \[SA40743\] Google Chrome Multiple Vulnerabilities 8. \[SA38830\] Symantec Products File Parsing Multiple Vulnerabilities 9. \[SA40807\] Apple iOS Security Bypass and PDF File Processing

 Vulnerability

10\. \[SA40720\] Mozilla Firefox Plugin Parameter Array Dangling Pointer

 Vulnerability

========================================================================

4\) This Week in Numbers

During the past week 77 Secunia Advisories have been released. All Secunia customers have received immediate notification on the alerts that affect their business.

This weeks Secunia Advisories had the following spread across platforms and criticality ratings:

Platforms:

 Windows : 15 Secunia Advisories

 Unix/Linux : 37 Secunia Advisories

 Other : 12 Secunia Advisories

 Cross platform : 13 Secunia Advisories

Criticality Ratings:

 Extremely Critical : 0 Secunia Advisories

 Highly Critical : 17 Secunia Advisories

 Moderately Critical : 23 Secunia Advisories

 Less Critical : 26 Secunia Advisories

 Not Critical : 11 Secunia Advisories

========================================================================

Secunia recommends that you verify all advisories you receive, by clicking the link.

Secunia NEVER sends attached files with advisories.

Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Definitions: (Criticality, Where etc.)

[http://secunia.com/advisories/about\_secunia\_advisories/](http://secunia.com/advisories/about_secunia_advisories/)

Subscribe:

[http://secunia.com/advisories/weekly\_summary/](http://secunia.com/advisories/weekly_summary/)

Contact details:

Web : <http://secunia.com/>

E-mail : [Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.](mailto:support@secunia.com)

Tel : +45 70 20 51 44

Fax : +45 70 20 51 45

========================================================================

 ***Ne pas surfer sur les sites incriminés***

 ***Pas de solution***

Vous aimez ce que vous lisez ? Notre travail est gratuit et indépendant, mais il a un coût. Vous pouvez nous soutenir librement grâce à un don via *[Tipeee](https://fr.tipeee.com/crashdebug-fr)* ou *[PayPal](https://www.paypal.com/paypalme/Crashdebug)*. Si vous ne pouvez pas nous aider financièrement (ce que je peux comprendre parfaitement), vous pouvez partager les articles sur vos réseaux sociaux, et parler du site autour de vous. Merci à celles et ceux qui rendent tout cela possible.

[![Google](https://www.google.com/images/branding/googleg/1x/googleg_standard_color_128dp.png)Ajouter Crashdebug.fr à Google](https://www.google.com/preferences/source?q=crashdebug.fr)

## Partager sur les réseaux sociaux

 [  Publier 0Nombre de partages sur X ](https://twitter.com/share?url=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-29-2010-08-05&text=The%20Secunia%20Weekly%20Advisory%20Summary%2029-07-2010%20-%2005-08-2010)0Nombre de partages sur X

 [  Partager 0Nombre de partages sur Facebook ](https://facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-29-2010-08-05)0Nombre de partages sur Facebook

 [  Partager 0Nombre de partages sur Linkedin ](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-29-2010-08-05&text=The%20Secunia%20Weekly%20Advisory%20Summary%2029-07-2010%20-%2005-08-2010)0Nombre de partages sur Linkedin

 [  E-mail 0Nombre de partages sur Email ](mailto:?subject=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-29-2010-08-05&body=The%20Secunia%20Weekly%20Advisory%20Summary%2029-07-2010%20-%2005-08-2010)0Nombre de partages sur Email

 [  WhatsApp 0Nombre de partages sur Whatsapp ](https://web.whatsapp.com/send?text=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-29-2010-08-05%20The%20Secunia%20Weekly%20Advisory%20Summary%2029-07-2010%20-%2005-08-2010)0Nombre de partages sur Whatsapp

 [  Télégramme 0Nombre de partages sur Telegram ](https://t.me/share/url?url=https%3A%2F%2Fwww.crashdebug.fr%2Fthe-secunia-weekly-advisory-summary-2010-07-29-2010-08-05&text=The%20Secunia%20Weekly%20Advisory%20Summary%2029-07-2010%20-%2005-08-2010)0Nombre de partages sur Telegram

---

 [  Previous  ](https://www.crashdebug.fr/le-desimlockage-de-laiphone-dangereux-la-preuve "Le désimlockage de l´iPhone dangereux ? La preuve !")

 [  Next  ](https://www.crashdebug.fr/120-teraoctets-saisis-dans-une-operation-anti-warez "120 téraoctets saisis dans une opération anti warez")

 ![loader](https://www.crashdebug.fr/media/com_rscomments/images/loader.gif)

  [  My comments ](https://www.crashdebug.fr/javascript:void(0); "This will show all of your comments.")   [  Subscribe ](https://www.crashdebug.fr/javascript:void(0) "Subscribe")

[](https://www.crashdebug.fr/javascript:void(0); "Bold") [](https://www.crashdebug.fr/javascript:void(0); "Italic") [](https://www.crashdebug.fr/javascript:void(0); "Underline") [](https://www.crashdebug.fr/javascript:void(0); "Stroke")

[](https://www.crashdebug.fr/javascript:void(0); "Quote") [](https://www.crashdebug.fr/javascript:void(0); "Emoticons") [](https://www.crashdebug.fr/javascript:void(0); "Preview")

[![:confused:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/confused.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:cool:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/cool.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:cry:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/cry.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:laugh:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/laugh.gif)](https://www.crashdebug.fr/javascript:void(0);)

[![:lol:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/lol.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:normal:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/normal.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:blush:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/redface.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:rolleyes:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/rolleyes.gif)](https://www.crashdebug.fr/javascript:void(0);)

[![:sad:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/sad.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:shocked:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/shocked.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:sick:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/sick.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:sleeping:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/sleeping.gif)](https://www.crashdebug.fr/javascript:void(0);)

[![:smile:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/smile.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:surprised:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/surprised.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:tongue:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/tongue.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:unsure:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/unsure.gif)](https://www.crashdebug.fr/javascript:void(0);)

[![:whistle:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/whistling.gif)](https://www.crashdebug.fr/javascript:void(0);) [![:wink:](https://www.crashdebug.fr/media/com_rscomments/images/emoticons/wink.gif)](https://www.crashdebug.fr/javascript:void(0);)

 [](https://www.crashdebug.fr/javascript:void(0); "Close preview")

  ![loader](https://www.crashdebug.fr/media/com_rscomments/images/loader.gif) 1000 Characters left

---

  Subscribe

  [ I agree to the terms and conditions. ](https://www.crashdebug.fr/javascript:void(0))

  I consent to this website collecting my details through this form.

 ![captcha](https://www.crashdebug.fr/component/rscomments/captcha?type=form4fcbd1a2e9a022057b66ba5cbfac9b98&sid=6ac7d5b782682&Itemid=56 "The captcha code is case insensitive.")  [  ](https://www.crashdebug.fr/javascript:void(0))

  ![loader](https://www.crashdebug.fr/media/com_rscomments/images/loader.gif)

### Terms & Conditions

 [I Agree](https://www.crashdebug.fr/javascript:void(0))[Close](https://www.crashdebug.fr/javascript:void(0))

### Subscribe

### Report

### My comments