Welcome to October's edition of Internet Security News, the monthly risks bulletin detailing the latest Internet software and system vulnerabilities from NTA Monitor, a leading Internet security testing company. It provides a convenient way to keep up to date with the fast changing world of Internet security; this month's edition includes a total of 8 risk issues: 2 High, 2 Medium, 1
Low and 3 Informational.
October 2007
Critical iTunes flaw patched
(High risk)
A critical flaw in iTunes, which could permit arbitrary code execution, has been patched by Apple
Read More
|
Microsoft's latest Patch Tuesday
(High risk)
Microsoft has patched one critical and three important issues in its latest Patch Tuesday, all of which could result in remote code execution or privilege elevation if successfully exploited
Read More
|
BIND 8 has reached the end of its life
(Medium risk)
A DNS cache poisoning flaw has been found in BIND 8, caused by predictable outgoing DNS query identifiers being generated
Read More
|
Yahoo! Messenger buffer overflow flaws
(Medium risk)
Boundary errors recently found in Yahoo! Messenger can result in system compromise
Read More
|
Firefox system access vulnerability found
(Low risk)
A vulnerability has been found in Mozilla Firefox that can permit system access if successfully exploited
Read More
|
Google wants web privacy laws
(Informational)
Search giant Google has recently announced that it welcomes the introduction of a basic set of global privacy laws
Read More
|
New report says that free AV software is as good as paid-for
(Informational)
A recent Which? survey has revealed that many free anti-virus programs are as good as paid-for brand solutions, such as Norton and McAfee. The survey found that the only drawback was that customer support might be inferior to paid-for solutions
Read More
|
Online crime hits UK every 10 seconds
(Informational)
A UK citizen becomes a victim of online crime every 10 seconds, according to new research
Read More
|
About NTA Monitor
This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security
testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of
testing services including:
- VPN Testing
- Onsite Auditing
- Web Application Test
- War Dialling
- Wireless Infrastructure Testing
- RM Vulnerability Testing
For more information on the above services please see our
services page.