NVDi Support News & Alerts » web browser vulnerabilities http://news.nvdi.net Support information and alerts for NVDi customers and friends Sat, 25 Jul 2009 03:06:15 +0000 en hourly 1 http://wordpress.org/?v=3.0 Alert: Microsoft to release out-of-band security update July 28th http://news.nvdi.net/2009/07/alert-microsoft-to-release-out-of-band-security-update-july-28th/ http://news.nvdi.net/2009/07/alert-microsoft-to-release-out-of-band-security-update-july-28th/#comments Sat, 25 Jul 2009 03:06:15 +0000 wkwalker http://news.nvdi.net/?p=152 Microsoft is releasing a pair of critical Windows security updates on July 28th. This is highly unusual. Microsoft normally issues security fixes on the second Tuesday of the month — “Patch Tuesday.” When they release an out-of-band update like this, it is usually because it deals with a critical vulnerability that is being actively exploited. According to Microsoft’s advance notification, the updates will affect Internet Explorer and Visual Studio. For most of us pluggers, it’s the Internet Explorer patch that will matter.

]]> http://news.nvdi.net/2009/07/alert-microsoft-to-release-out-of-band-security-update-july-28th/feed/ 0 Alert: Firefox 3.5.1 released — fixes important vulnerability http://news.nvdi.net/2009/07/alert-firefox-3-5-1-released-fixes-important-vulnerability/ http://news.nvdi.net/2009/07/alert-firefox-3-5-1-released-fixes-important-vulnerability/#comments Thu, 16 Jul 2009 18:46:34 +0000 wkwalker http://news.nvdi.net/?p=140 Firefox 3.5.1. has just been released to fix a potentially critical vulnerability. It’s not listed on the regular download page yet, but should be shortly.

A couple of days ago, proof-of-concept code was posted showing how a malicious web site could trigger a “drive-by download” when a page was viewed with Firefox 3.5. The 3.5.1 release plugs this hole.

You can get the latest version of Firefox from the Mozilla web site or by clicking on “Check for updates…” in the Firefox Help menu or you can wait for the update to be offered to you automatically when you launch Firefox. Personally, I wouldn’t wait too long.

]]> http://news.nvdi.net/2009/07/alert-firefox-3-5-1-released-fixes-important-vulnerability/feed/ 0