Updates

Vulnerabilities in RealPlayer

Two vulnerabilities have been reported in RealPlayer for Windows. Errors in processing of WAV files and SMIL (Synchronised Multimedia Integration Language) files can lead to a buffer overflow. Hackers can exploit this vulnerability using a compromised WAV or SMIL file. The successful exploitation of these vulnerabilities permits hackers to gain control of affected systems.

Patches are available for download at:service.real.com/help/faq/security/security022405.html

FireFox and Mozilla vulnerable

Several vulnerabilities have been reported in FireFox and Mozilla. These can be exploited by local users to gain escalated privileges. In both browsers, a temporary plugin directory is created that can be exploited to delete directories with the privileges of the user running these browsers. Further, an inactive tab can be exploited to launch an HTTP authentication prompt. This vulnerability can be used by hackers to trick users into entering sensitive information. A memory handling error in the Mozilla string class allows memory to be overwritten if the browser runs out of memory. This can be exploited to execute malicious code.

Patches are available at:www.mozilla.org/security/announce/mfsa2005-28.html

Flaw in Cisco ACNS

Vulnerabilities have been reported in devices running Cisco Application and Content Networking System (ACNS) software. A vulnerability in the way TCP connections are processed lets a hacker restart the ACNS cache process. Errors in network packet processing can be exploited to consume 100 percent of CPU resources, even causing a device to continuously forward copies of a specially-crafted packet. These vulnerabilities can be used to launch denial of service attacks.

Cisco has released updated versions for addressing these vulnerabilities. More information is available at : www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml

Image worm

A new mass mailing worm, W32 / Wurmark-F disguises itself as a .jpg file to trick the users into installing it. After installation, the worm drops a zip file along with the .jpg file and sends itself as a zip attachment to e-mail addresses found on the infected computer. Most security firms have released patches for this worm.