December 2006
Welcome to December's edition of Internet Security News, the monthly risks bulletin detailing the latest Internet software and system vulnerabilities from NTA Monitor, a leading IT security testing company. It provides a convenient way to keep up to date with the fast changing world of IT security; this month's edition includes a total of 11 risk issues: 4 High, 2 Medium and 5 Informational .
Five critical Microsoft flaws
(High risk) Five critical issues and one important issue were addressed in Microsoft's November security bulletin, which affected a variety of products including Internet Explorer and Macromedia Flash Player 1st December 2006 Read MoreMac OS X flaw
(High risk) A new flaw has been found in Mac OS X that may enable local attackers to escalate user privileges or compromise a vulnerable system 1st December 2006 Read MoreOpera buffer overflow flaw
(High risk) Very long links can cause Opera to crash, meaning that a specially crafted link could be used to execute malicious code on users' PCs 1st December 2006 Read MorePHP DoS flaws
(High risk) Vulnerabilities recently reported in PHP can be exploited to cause a Denial of Service or compromise a vulnerable system 1st December 2006 Read MoreMozilla Thunderbird flaws discovered
(Medium risk) Four vulnerabilities have been discovered in Thunderbird 1.5.x that may allow an attacker to bypass certain security restrictions, conduct cross site scripting attacks and potentially compromise a vulnerable system 1st December 2006 Read MoreSophos DoS vulnerability
(Medium risk) Numerous versions of Sophos Anti-Virus have been affected by an error that arises when processing files compressed with Petite that contain a large number of sections 1st December 2006 Read MoreFinancial domain names being resold
(Informational) Some domain names being resold could be used to facilitate credit card or bank account fraud 1st December 2006 Read MoreGoogle sends out Kama Sutra worm
(Informational) Early in November, Google inadvertantly sent out the Kama Sutra worm to 50,000 Google Video subscribers 1st December 2006 Read MoreVirus writer targeted Wikipedia
(Informational) Wikipedia was recently targeted by a virus writer who uploaded a virus that was designed to collect information for future use in phishing campaigns 1st December 2006 Read MoreNew Second Life bug
(Informational) During November, the online world Second Life suffered from a self-replicating grey goo worm planting spinning gold rings around the virtual world 1st December 2006 Read MoreNew Second Life bug
(Informational) During November, the online world Second Life suffered from a self-replicating grey goo worm planting spinning gold rings around the virtual world 1st December 2006 Read MoreAbout NTA Monitor
This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of testing services including:
- VPN Testing
- Onsite Auditing
- Web Application Test
- War Dialling
- Wireless Infrastructure Testing
- RM Vulnerability Testing
For more information on the above services please see our services page.