Microsoft security patches

Microsift has reissued a recent patch after it emerged that the original version included in its June security update damaged the dial-up functionality of Windows.

The patch is for a vulnerability in Routing and Remote Access (RRAS) that could allow remote code execution on Windows XP and Windows Server.

The cause of the bug is a remote code execution vulnerability in the Remote Access Connection Manager service that could allow an attacker to take complete control of the affected system.

More information is available in Microsoft Security Bulletin MS06-025

Apple plugs five security holes

Apple has released a security update for its OS X operating system that plugs five vulnerabilities.

Apple does not issue severity ratings for vulnerabilities in its software, but at least two of the repaired vulnerabilities could allow an attacker to take control of a system.

The update to version 10.4.7 repairs a vulnerability in the way that OS X handles TIFF images which could be exploited through a specially crafted image. The vulnerability can cause an application to crash or allow for arbitrary code execution.

Users can update their system through the update service built into OS X or by manually downloading the patch from the Apple support website.

Avast! 4.7.844 Home Edition

Avast! is an antivirus application that is free for non-commercial use, and offers adequate protection for the average home user.

Consisting of three components, it covers the most common areas of infection and provides regular updates to ensure that its protection is current.

The On Access Scanner scans all files being opened, read and written in real time. It also includes a behaviour blocker for analysing and preventing any unusual behaviour that may originate from a virus.

If you think a virus has infected your PC, simply run the On Demand Scanner selecting exactly which drive(s) and files to scan.

Its Email Scanner integrates directly with many email clients, and checks incoming and outgoing messages for infection. It takes a heuristic approach to virus prevention, learning from experience.

It also comes with a Virus Chest for storing infected or suspicious files...

Free Download For Non-Commercial use

Windows Live Messenger 8.0.0787 beta

Windows Live Messenger Beta is the next-generation MSN Messenger, and has everything you already love about Messenger - your contact list, emoticons and instant access to your friends via text, voice, and video.

It also has new ways to connect and share documents with almost magical ease. As always, it is free to download and use most of its features.

New or improved features include:

* Send all your familiar winks and emoticons, plus some cool new ones
* Have real-time text, video and voice conversations*
* Call your friends' mobile or land-line telephones by signing up with Verizon Web Calling to make affordable domestic and international calls
* Easily share documents of all kinds with Sharing Folders
* Make free PC-to-PC calls with other Messenger users.

Click here to downlaod

Microsoft issued 12 security advisories and updates for them for products from PowerPoint to Windows to Exchange Server. Start Windows Update, and while it's running read the Security Alerts and Updates section.

One critical bug wasn't, and won't, be patched for Windows 98. If you hadn't already got the message, it's time to move on from that operating system for reasons you can read in the Win9x End of Support section.

Read more about it Here

Attackers target unpatched Excel flaw

Microsift is warning of a new online threat that targets an unpatched flaw in the Excel spreadsheet application. The vulnerability is exploited when Excel enters the so-called repair mode.

The flaw is actively being exploited by attackers to take control of a system. The vulnerability affects Microsoft Excel 2003, Excel Viewer 2003, Excel 2002, Excel 2000, Microsoft Excel 2004 for Mac, and Microsoft Excel v. X for Mac.

Attackers will have to persuade users to open an email attachment or download and open a specially crafted file from the web.

Microsoft is developing a patch and most antivirus vendors have created an antidote for the virus.

The Microsoft Excel security advisory said that users should not open Excel files from untrusted sources.

Users should also prevent infection by instructing the email server to block all incoming Excel file types or block the ability inside Outlook to open the documents with the Excel applications.

Users of Excel 2003 should also prevent the application from entering into a repair mode by changing the application's settings.

Bill Gates, the man who started Microsoft and has been its public face throughout its three decades of existence, plans to step away from daily work at the company.

Gates announced on Thursday that he will gradually relinquish his current role, ceding the title of chief software architect immediately, while remaining a full-time employee for the next two years. In July 2008, he will remain as a part-time employee and chairman.


Read the whole Story

No fix for 'critical' hole in Windows 98, ME

The security bug relates to Windows Explorer and could let an intruder commandeer a vulnerable PC, Microsoft warned in April. The software maker has made fixes available for Windows Server 2003, Windows XP and Windows 2000, but it has found that eliminating the vulnerability in Windows 98 and ME is "not feasible," it said.


Microsoft is phasing out support for the older operating systems. Windows 98 was released in June 1998, Second Edition followed a year later, and Millennium Edition came out in 2000. Microsoft has been providing fixes for only "critical" flaws the past couple of years and is ending support altogether next month, after its planned July 11 patch release. Windows XP with Service Pack 1 reaches its end of support on Oct. 10, 2006.

Instead, Microsoft recommends that people who still use the older operating systems protect their PCs by using a network firewall that filters traffic on TCP Port 139. "Such a firewall will block attacks attempting to exploit this vulnerability from outside of the firewall," it said.


More news..

Microsoft launches Windows Vista public beta

Microsoft is warning that the operating system is still in development and " should not be used in a production environment or on a main machine in the home ". The software is also time limited and will cease to function after 1 June 2007.

The download version is only suitable for users with a fast internet connection; the 32-bit version is 3.5GB, while the 64-bit version weighs in at 4.4GB.

Click here for Full specification

Mozilla Firefox 1.5.0.4 with additional security fixes.

Firefox is built with speed in mind, and does away with many of the components of its big sister, Mozilla. Therefore, all you get is a browser, download manager and a DOM inspector (for developers). This results in a tiny download and a very fast application (both starting up and rendering pages). Tabbed browsing and a pop-up stopper are, of course, included as standard. The latter can also foil other irritations such as scrolling status bar messages and 'spoofed' (false) URLs in the address bar to which IE is prone. Features include improved privacy which prevents websites installing applications on your PC without your knowledge (you need to authorise a site first). Privacy is also improved with the addition of a master password for protecting all saved passwords.

Click here for Free download