There’s a new version of Shockwave from Adobe. It’s now at version 11.5.8.612, updated to block multiple problems that allowed third-party code to run without the appropriate permissions. Update at http://get.adobe.com/shockwave/ More information at Homeland Security: http://www.us-cert.gov/current/index.html#adobe_releases_security_bulletin_for8
Adobe Reader has a new patch, moving it to a current release of 9.4.4. This is not on their announced schedule of matching the Microsoft second-Tuesday patch release calendar. This patch requires a system reboot. According to the Adobe release notes: These updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2010-2862). [...]
Apple has updated QuickTime to version 7.6.7. It’s a security update, blocking attackers from using an error code to overflow a buffer, and so run code that would normally not be allowed while online, and to block a possible DOS (denial of service) condition. More at Homeland Security, here.
Adobe has released an update to Flash Player. It’s a security fix, preventing either execution of arbitrary code (malware installs are possible), or a denial of service attack. More at US Homeland Security, here.
Apple has released an update for iTunes. It’s a security update to prevent a denial-of-service attack based on podcast links. More information is at US-Cert, the US Computer Emergency Readiness Team. The list of the most-commonly installed web file viewers and their current patch levels and links to version tests and installers has been updated, [...]
