Microsoft fixed 26 vulnerabilities in 13 security bulletins as part of its Patch Tuesday, including critical ones for Windows that could be exploited to take control of a computer and one that has resided in the 32-bit Windows kernel since its release 17 years ago.
The top priorities for deployment are bulletins plugging holes in the SMB (Server Message Block) Protocol, Windows Shell Handler, ActiveX via Internet Explorer, DirectShow, and the 32-bit version of Windows, Jerry Bryant, a lead senior security communications manager at Microsoft, wrote in a blog post.
The DirectShow bulletin should be at the top of the list, according to Bryant. It is critical for all supported versions of Windows except Itanium-based server products. To exploit the hole, an attacker could host a malicious AVI (Audio Video Interleave) file on a Web site, and lure a user to visit the site or send the file via e-mail so the user could open it.
In the SMB bulletin, critical for all versions of Windows except Vista and Server 2008, an attacker would need to host a malicious server and convince a client system to connect to it, or an attacker could try to perform a man-in-the-middle attack by responding to SMB requests from clients, Bryant said.
In the critical Windows Shell Handler vulnerability, which affects Windows 2000, XP, and Server 2003, an attack could come via a specially crafted link that appears to be valid to the ShellExecute API (application programming interface).
The cumulative update for ActiveX Killbits is critical, but a Killbit does not address the underlying vulnerability. It is a registry setting that keeps the vulnerable ActiveX control from running in IE.
Archive
Tag: Update
K-Lite Codec Pack Changelog:
* Updated ffdshow to revision 3054
* Updated AC3Filter to version 1.62b
* Updated AC3File to version 0.7b
* Updated FLV splitter to version 1.2.1207.0
* Updated Gabest MPEG splitter to version 1.2.1207.0
* Updated MediaInfo Lite to version 0.7.20
* Added more file association options for audio file types
* Minor changes
Download K-Lite Codec Pack 5.05 : Full
Also Available:
K-Lite Codec Pack 5.05 : Mega
K-Lite Codec Pack 5.05 : Basic
Updates to America’s Army 3 were released today.
- Removes Password from AA3Launch.log
- Fix for MBS not working after server changes to a new map
- Fixes TeamReady in Mission Preplanning
- Updated authentication SDK to improve reliability and performance
- Fix for freezing on training mission load
- Improved performance on loading maps/training missions
- Fixed several small memory leaks
- Fixed performance issue with server that caused it to load UI elements into the server (where they aren’t needed) and thus use up additional CPU and memory.
- Modified training authentication so it is more efficient
- Modified AMD negative delta time exception handling so it no longer stops the server or client, but just logs the event
- Fixed Admin add Player Admin
- Fixed Admin kicking of players. Now works properly with Soldier name and has optional kick by player ID
- Add new AdminListPlayers to get list of players and their player ID’s
- Removes most of the server log spam, especially that tied to missions and mission setup and ROE
- Fixes several issues related to ROE firing off when player is bleeding, asphyxiating, or falling after being wounded by ROE
- You can now strafe on ladders so you don’t get stuck in Pipeline or Obstacle Course. Strafe too far and you fall off, just like AA 2.x
- Modified program startup to clear out any old ATS temporary files
- Improved scoring messaging support for training missions
- Fixes several scoring issues
- Optimizes more of the authentication code and adds better exception handling in it
- Adjusts STS (stats) integration to better detect invalid objects to avoid crashes
- Fixes issues with single player stats not correctly initializing all of the time
- Adds feedback to UI when player purchases training until purchase is complete (says “Purchasing”)
- Modifies MBS to track how many players are playing vs. how many players are on the server (player + Spectators) and now MBS browser only shows the number of players (so the count won’t exceed max players)
- Turns HUD off whenever menu is activated (still an issue with battle planner activation the first time, however)
- Adjusts the close menu logic to always close properly so double menus should no longer happen
America’s Army 3 Update Released
Updates to America’s Army 3 have been released. The updates will be applied automatically when your Steam client is restarted. The specific changes include:
* Removed apparent lag caused by other players entering or leaving a server
* Improved start of round spawn issues
* Resolved problem with training results not saving
* Improved communication with Authentication server
* Eliminated freezing up when moving from one training mission to another
* Cleared up hesitation during training missions
* Significantly reduce number of authentication transactions between player and Authentication server
* Solved achievements save and display problems
* Improved Login communication with Authentication server
* Improved player statistics tracking for better accuracy
* Improved overall performance
This week brought a major update to Microsoft Office 2007 — Service Pack 2, a free download that fixes bugs, improves performance and adds a few new features in the company’s bundle of productivity applications (see my review).
This update should arrive automatically if you use Windows’ Microsoft Update option, or you can download the 290-megabyte file yourself.
The headline attraction of Office 2007 SP2 is the support it adds for some important, non-Microsoft file formats. It can read and write Open Document Format files, which may help Office users share files with people running the sometimes-unimpressive, but always free and open-source OpenOffice.org suite. Office 2007 SP2 also lets users save a copy of their work as a Portable Document Format file — a helpful feature that Microsoft had unwisely required people to install an optional add-on to use before.
K-Lite Codec Pack Changelog:
* Updated Media Player Classic Homecinema to version 1.2.1005.0
* Updated Media Player Classic to version 6.4.9.1 rev. 98
* Updated ffdshow to revision 2732
* Updated Gabest MPEG splitter to version 1.2.997.0
* Updated Gabest Ogg splitter to version 1.2.997.0
* Updated DirectVobSub to version 2.39.5.1
* Updated x264VFW to revision 1114
* Updated MediaInfo Lite to version 0.7.11
* Fixed small issue with internal filter configuration in MPC
* Fixed file association issue when using regular the version of MPC
* Fixed crash with DVD playback that was present in version 4.6.2
* Minor changes
Download K-Lite Codec Pack 4.70 : Full
Also Available:
K-Lite Codec Pack 4.70 : Mega
K-Lite Codec Pack 4.70 : Basic
What’s New in Firefox 3:
The Web is all about innovation, and Firefox 3 sets the pace with dozens of new features to deliver a faster, more secure and customizable Web browsing experience for all.
User Experience. The enhancements to Firefox 3 provide the best possible browsing experience on the Web. The new Firefox 3 smart location bar, affectionately known as the “Awesome Bar,” learns as people use it, adapting to user preferences and offering better fitting matches over time. The Firefox 3 Library archives browsing history, bookmarks, and tags, where they can be easily searched and organized. One-click bookmarking and tagging make it easy to remember, search and organize Web sites. The new full-page zoom displays any part of a Web page, up close and readable, in seconds.
Performance. Firefox 3 is built on top of the powerful new Gecko 1.9 platform, resulting in a safer, easier to use and more personal product. Firefox 3 now uses less memory while it’s running, and its redesigned page rendering and layout engine means users see Web pages two to three times faster than Firefox 2.
Security. Firefox 3 raises the bar for security. The new malware and phishing protection helps protect from viruses, worms, trojans and spyware to keep people safe on the Web. Firefox 3’s one-click site ID information allows users to verify that a site is what it claims to be. Mozilla’s open source process leverages the experience of thousands of security experts around the globe.
Customization. Everyone uses the Web differently, and Firefox 3 lets users customize their browser with more than 5,000 add-ons. Firefox Add-ons allow users to manage tasks like participating in online auctions, uploading digital photos, seeing the weather forecasts, and listening to music, all from the convenience of the browser. The new Add-ons Manager helps users to find and install add-ons directly from the browser.
For more information about Mozilla Firefox 3 and how it delivers an easier, faster, and safer online experience, visit http://www.mozilla.com/firefox/features.
Firefox 3.0.6 contains the following updates:
# Fixed several security issues.
# Fixed several stability issues.
# In previous versions of Firefox, some users experienced a problem where parts of the screen were not properly displaying after Firefox was open for long periods of time.
# Improved the ability for scripted commands (including those included in popular extensions like Adblock Plus) to work properly with plugins. (bug 438830)
# Removed the client user ID from crash reports.
# Fixed issues with the display of some Indic scripts.
Download Firefox 3.0.6 here.
OpenOffice.org 3.01 is released. OpenOffice is and has been a great free alternative for opening and creating office documents, and with the 3.x series, works with Microsoft Office 2007 document types. With the 3.01 release, OpenOffice has two new features of interest (1) an integrated grammar checker and (2) an OOo file locking mechanism for alien formats.
and more…
- user dictionaries can now handle up to 30,000 entries instead of the original 2,000
- Antialiased drawings
- Solid dragging
- increase/decrease font size buttons
- sorting improvements
Basic antivirus and antispyware protection for Windows available to download for free. Limited features, no support, for private and non-commercial use only.
* The most downloaded software on CNET’s Download.com
* Quality proven by 70 millions of users
* Easy to download, install and use
* Protection against viruses and spyware
* Compatible with Windows Vista and Windows XP