Hope 2011 is better!!

Recently security vendor Bit9 released its annual "Dirty Dozen" list. According to statistics obtained from International Institute of Standard and Technology and International Vulnerability Database, it lists top 12 software with most vulnerabilities for 2010. From January to October this year, Google Chrome browser vulnerability has been discovered up to 76, which tops the list.

Besides Google Chrome, Apple's Safari browser and Microsoft Office's vulnerabilities are also getting more exposure, respectively 60 and 57 in the past year, ranking second and third. The software included in the list are frequently used. Here is the specific list:

1. Google Chrome, 76 vulnerabilities;
2. Apple Safari, 60 vulnerabilities;
3. Microsoft Office, 57 vulnerabilities;
4. Adobe Acrobat, 54 vulnerabilities;
5. Mozilla Firefox, 51 vulnerabilities;
6. Sun JDK, 36 vulnerabilities;
7. Adobe Shockwave Player, 35 vulnerabilities;
8. Microsoft IE, 32 vulnerabilities;
9. RealNetworks RealPlayer, 14 vulnerabilities;
10. Apple Webkit, 9 vulnerabilities;
11. Adobe Flash Player, 8 vulnerabilities;

12. Apple Quicktime and Opera browser, 6 vulnerabilities.

Article from: Top 12 Software with Most Vulnerabilities for 2010

Adobe Acrobat/Reader Phishing Scam

Today the Adobe Product Security Incident Response Team (PSIRT) released a bulletin stating the email phishing scam that has been reported by customers for some Adobe products.

This is what their bulletin said:

"With the availability of Adobe Acrobat X solutions this week, a reminder to be cautious when receiving email messages purporting to offer a download of a new version of Adobe Acrobat or Adobe Reader sent by entities claiming to be Adobe.

Many of these emails require recipients to register and/or provide personal information. Please be aware that these emails have not been sent by Adobe or on Adobe’s behalf.

The Adobe Reader, in particular, is free software available for download directly from the Adobe Reader download page on the Adobe website at http://get.adobe.com/reader/; it is not available in any other manner via download, including via email.

Customers receiving one of these potentially malicious emails should delete the email immediately without clicking on any of the links."

We at tech-DA-hack always recommend our readers to stay alert towards any email that may seem suspicious. We also strive to keep you updated with the latest news,vulnerabilities,reports,etc.

Vulnerability:- Adobe Shockwave Player

A critical vulnerability exists in Adobe Shockwave Player 11.5.8.612 and earlier versions on the Windows and Macintosh operating systems.

This vulnerability (CVE-2010-3653) could cause a crash and potentially allow an attacker to take control of the affected system. While details about the vulnerability have been disclosed publicly, Adobe is not aware of any attacks exploiting this vulnerability against Adobe Shockwave Player to date.

Adobe actively shares information about this and other vulnerabilities with partners in the security community to enable them to quickly develop detection and quarantine methods to protect users until a patch is available.

As always, Tech-da-Hack recommends that users follow best security practices by keeping their anti-malware software and definitions up to date.