An Internet Explorer bug has been found days ago. Microsoft almost immediately on Tuesday, July 5, 2005, posted a temporary workaround to a bug in Internet Explorer that could let an attacker grab control of a PC.

The vulnerability involves the “Javaprxy.dll” file, which is part of the Microsoft Java Virtual Machine, and handles ActiveX controls. A hacker could exploit the bug to make IE crash or even insert his own code onto the system.
Continue Reading »
Temporary Workaround For IE Bug

Another critical bug in Microsoft ‘s Internet Explorer (IE) browser has been found by researcher at Austrian security consulting firm SEC Consult. This IE bug can cause the software to crash, in turn, could possibly be used to let an attacker run unauthorized software on the IE user’s computer system. Microsoft has confirmed that the bug exists and is investigating the matter.

By loading HTML pages that make use of certain ActiveX components, researchers were able to overwrite registers on the computer’s processor, said Martin Eisner, CTO with SEC Consult. This technique could theoretically be used to fill parts of the computer’s memory with malicious code, creating what is called a “heap-based buffer overflow,” he said.

Quoted:
“It’s possible to crash Internet Explorer,” Eisner said. “Executing arbitrary code might be possible; we could not confirm that now.”

Continue Reading »
IE Bug Might Crash Browser

Sun Microsystems announced on Tuesday, June 14, 2005, has fixed a pair of security bugs in Java that could be exploited by attackers to take over computers running Windows, Linux and Solaris (almost all kinds of OS :-O ).

The flaws are “highly critical” security monitoring company Secunia said in an advisory posted Tuesday.

Quoted:
Both flaws affect the Java Runtime Environment, or JRE. This is the Java software many computer users have on their system to run Java applications. The bugs could allow a Java application to read and write files or execute applications on a victim’s computer, Sun said in two separate security advisories released Monday.

Continue Reading »
Java Flaws Open Door To Hackers

Just days after the al-Qaida leader committing suicide trojan email, a spam email claiming that Michael Jackson has attempted suicide has been spreading across the Internet, according to Internet security firm Sophos.

E-mails with the fake news contain a Trojan horse that infects a system if a user clicks on a link to find out more about Michael Jackson’s suicide.

Read More In thepcsecurity.blogspot.com

On Friday, June 10, 2005, anti-virus vendor F-Secure announced a variant of the Cabir worm aimed at Nokia smartphones pretends to be legitimate anti-virus software.

The Skulls.L trojan is a variant of the Skulls.C trojan except it masquerades as an illegally copied version of F-Secure’s Mobile Anti-Virus program. The trojan is aimed at smartphones based on the Nokia Series 60 platform, which is based on the Symbian OS.

Read More At thepcsecurity.blogspot.com

A spam e-mail that attached pictures of a captured Osama bin Laden but carries a malicious trojan in the attachment has been spreading recently.

Millions of copies of various versions of the e-mail were mass-mailed on Thursday, June 2, 2005. All versions of the message announced that the al-Qaida leader had been seized and included an attachment called “pics” that, when opened, attempted to download a worm to the victim’s PC.

Read More In : thepcsecurity.blogspot.com