DEranged Security » 2007 » October

» 2007 » October Archive for October, 2007 Airport fun and bluetooth security Wednesday, October 10th, 2007 Posted in DEranged Security | 3 Comments » This weekend I went to New York to attend the Hugh Thompsson show. Great fun! On the way home however, my laptop battery went dead and there I was sitting at the JFK airport in New York with hours to … Thoughts about “hackers” and business Tuesday, October 2nd, 2007 Posted in DEranged Security | 5 Comments » Read a very interesting article. Are “hackers” a valuable source or just a threat in business life? Would you employee one? A “hacker” in media and general public means something along the line of an evil person stealing or destroying using a … DEranged Security You are currently browsing the DEranged Security weblog archives for October, 2007. Pages About Archives October 2007 September 2007 August 2007 Categories DEranged Security (6) Powered by WordPress Designed by Bob Top

What security vulnerabilities were disclosed in October 2007?

Oracle released its Critical Patch Update for October 2007, containing 51 new security fixes across all products. The vulnerabilities affect Oracle Database, Oracle Application Server, Oracle Collaboration Suite, Oracle E-Business Suite, Oracle Enterprise Manager, and Oracle PeopleSoft Enterprise products. Oracle strongly recommends that customers apply the fixes as soon as possible due to the threat posed by a successful attack.

Source: oracle.com

What security advisories were released in October 2007?

Oracle released its Critical Patch Update for October 2007, containing 51 new security fixes across all products. Microsoft issued six security bulletins on October 9, 2007, addressing nine vulnerabilities: MS07-055 for Kodak Image Viewer, MS07-056 for Outlook Express and Windows Mail, MS07-057 for Internet Explorer, MS07-058 for RPC, MS07-059 for Windows SharePoint, and MS07-060 for Microsoft Word. Four of these were rated Critical, allowing remote code execution.

Source: jpcert.or.jp

What malware or viruses emerged in October 2007?

New entries in October 2007 included Trojan-Spy.HTML.Fraud.ay, a phishing email; Exploit.Win32.PDF-URI.k, a PDF exploit; and Virus.Win32.Virut.a, a file infector that is not operational if KAV is installed. A new Trojan horse, PDFex, was typically spammed out in email messages with an infected Adobe Acrobat PDF attachment and took advantage of an unpatched Windows vulnerability. Troj/Unif was a new entry accounting for 15 percent of all infected webpages.

Source: securelist.com