Archive for the 'Security' Category

Just days after the latest release of Firefox 1.0.5, Mozilla Foundation is going to release Firefox 1.0.6 as early as next week. This is due to the API changes in 1.0.5 unintentionally broke some extensions, which have caused some incompatibility between the browser and web-based applications. That’s why some of your old extensions cannot be used in the new Firefox 1.0.5. A test builds of Firefox 1.0.6 has already been released for developers to test.
Quoted:
“It’s a very small percentage of Firefox users that are affected by this directly, but there is a growing number of people building applications, content and extensions that rely on the [browser] platform,” Mozilla’s director of engineering, Chris Hofmann said.
Continue Reading »
Firefox 1.0.6 Is Coming Our Way Next Week
July 7 London terrorist attacks has been the focus for the past 1 week, therefore virus writers and scammers are taking advantage of this incident to launch a few viruses and scams in the cyberspace.
A Windows virus arrives in an e-mail message with “TERROR HITS LONDON” in the subject line has been created that claims to link to amateur video footage of the aftermath of one of the bombs on the London Underground, the BBC reported Monday, July 11, 2005. The message tells those receiving it to click on the attached file named “London terror moovie.avi” to see amateur video footage shot in the London Underground immediately after one of the bombs went off. The actual file name is hidden after a long series of blank spaces of the attached file.
Continue Reading »
Beware Of London Bombing Virus & Scam
An Internet Explorer bug has been found days ago. Microsoft almost immediately on Tuesday, July 5, 2005, posted a temporary workaround to a bug in Internet Explorer that could let an attacker grab control of a PC.
The vulnerability involves the “Javaprxy.dll” file, which is part of the Microsoft Java Virtual Machine, and handles ActiveX controls. A hacker could exploit the bug to make IE crash or even insert his own code onto the system.
Continue Reading »
Temporary Workaround For IE Bug

Another critical bug in Microsoft ’s Internet Explorer (IE) browser has been found by researcher at Austrian security consulting firm SEC Consult. This IE bug can cause the software to crash, in turn, could possibly be used to let an attacker run unauthorized software on the IE user’s computer system. Microsoft has confirmed that the bug exists and is investigating the matter.
By loading HTML pages that make use of certain ActiveX components, researchers were able to overwrite registers on the computer’s processor, said Martin Eisner, CTO with SEC Consult. This technique could theoretically be used to fill parts of the computer’s memory with malicious code, creating what is called a “heap-based buffer overflow,” he said.
Quoted:
“It’s possible to crash Internet Explorer,” Eisner said. “Executing arbitrary code might be possible; we could not confirm that now.”
Sun Microsystems announced on Tuesday, June 14, 2005, has fixed a pair of security bugs in Java that could be exploited by attackers to take over computers running Windows, Linux and Solaris (almost all kinds of OS :-O ).
The flaws are “highly critical” security monitoring company Secunia said in an advisory posted Tuesday.
Quoted:
Both flaws affect the Java Runtime Environment, or JRE. This is the Java software many computer users have on their system to run Java applications. The bugs could allow a Java application to read and write files or execute applications on a victim’s computer, Sun said in two separate security advisories released Monday.
Just days after the al-Qaida leader committing suicide trojan email, a spam email claiming that Michael Jackson has attempted suicide has been spreading across the Internet, according to Internet security firm Sophos.
E-mails with the fake news contain a Trojan horse that infects a system if a user clicks on a link to find out more about Michael Jackson’s suicide.
Read More In thepcsecurity.blogspot.com















