Welcome to July's edition of Internet Security News, the monthly risks bulletin detailing the latest Internet software and system vulnerabilities from NTA Monitor, a leading Internet security testing company. It provides a convenient way to keep up to date with the fast changing world of Internet security; this month's edition includes a total of 8 risk issues: 5 High, 1 Medium, 0
Low and 2 Informational.
July 2007
Microsoft's June Patch Tuesday
(High risk)
Six vulnerabilities were patched in Microsoft's June Patch Tuesday, four of which are classed as critical
Read More
|
Multiple WordPress vulnerabilities found
(High risk)
Numerous WordPress flaws have been found, some of which can facilitate Cross-Site Scripting and SQL injection
Read More
|
Norton Personal Firewall buffer overflow flaw
(High risk)
A buffer overflaw flaw has been discovered in Norton's Personal Firewall, which could be exploited by malicious people to compromise a user's system
Read More
|
Two Apple QuickTime vulnerabilities found
(High risk)
Two vulnerabilities have been found in Apple's QuickTime, which if exploited, can allow malicious people to compromise a user's system
Read More
|
Two buffer overflow flaws found in Yahoo! Messenger
(High risk)
Two highly critical Yahoo! Messenger flaws have been patched after proof-of-concept code was released
Read More
|
OpenOffice worm affects Windows, Mac and Linux
(Medium risk)
Malware is circulating that targets OpenOffice documents and is capable of infecting Windows, Mac and Linux platforms
Read More
|
DIY phishing kits facilitate fake sites
(Informational)
Nine out of ten new phishing sites in May were created using phishing kits
Read More
|
BBC and Yahoo! hold 'hack day' in London
(Informational)
Web developers gathered in mid June for the first BBC/Yahoo! 'hack day'
Read More
|
About NTA Monitor
This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security
testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of
testing services including:
- VPN Testing
- Onsite Auditing
- Web Application Test
- War Dialling
- Wireless Infrastructure Testing
- RM Vulnerability Testing
For more information on the above services please see our
services page.