arbitrary code execution

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

iPhone update kills 12 security bugs

Apple has released iPhone OS 2.2 with patches for 12 documented security flaws, some very serious. The vulnerabilities covered by the patch which also affect iPod Touch could allow remote code execution, information theft, software crashes and weakened encryption settings. The skinny on this...

Tags: Apple iPhone, Security, Issue, SMS, Arbitrary Code Execution, Security Bug, Application Termination, Text Messaging/SMS/MMS, Telephony, Cellular Phones, Consumer Electronics, Personal Technology, Online Communications, Networking, Ryan Naraine

Blog posts 2008-11-21

Sun plugs holes in StarOffice

Two weeks after the OpenOffice.org team shipped patches for code execution flaws in office suite, Sun Micrososystems has followed up with a high-priority update for StarOffice, which is based on the open-source code. Sun's patch, available for Windows, Linux and Solaris, address highly-critical vulnerabilities that could expose...

Tags: Sun Microsystems Inc., OpenOffice.org, Arbitrary Code Execution, StarOffice, OpenOffice, Patches, Open Source, Office Suites, Software, Ryan Naraine

Blog posts 2008-11-14

Apple fixes 12 Safari security flaws

Apple has release Safari 3.2 to fix at least a dozen security flaws, some very serious. The update, available for Windows XP, Windows Vista and Mac OS X Tiger and Leopard, address vulnerabilities that could be exploited to take full control of a compromised machine. ...

Tags: Apple Safari, Apple Inc., Arbitrary Code Execution, Buffer-overflow, TIFF, Application Termination, Security, Viruses And Worms, Ryan Naraine

Blog posts 2008-11-13

Apple ships patch for iLife security flaws

Apple has shipped a major iLife security update to fix three documented vulnerabilities that could expose Mac OS X users to arbitrary code execution attacks. The flaws patched with the new iLife Support 8.3.1 could be exploited via specially crafted TIFF or JPEG images, Apple warned in...

Tags: Security, Apple Macintosh, Apple iLife, Apple Inc., Arbitrary Code Execution, Image, TIFF, Application Termination, Apple Mac OS, Operating Systems, Software, Ryan Naraine

Blog posts 2008-11-10

Mac OS X Patch Day: 40 security flaws fixed

Apple has shipped another whopper of a patch to cover a total of 40 documented vulnerabilities affecting the Mac OS X ecosystem. The Security Update 2008-007, available for Tiger and Leopard, covers a range of third-party components and Mac OS X flaws that could users at risk...

Tags: Apple Macintosh, Vulnerability, Arbitrary Code Execution, Application Termination, Apple Mac OS X, Security, Operating Systems, Software, Apple Mac OS, Ryan Naraine

Blog posts 2008-10-09

Apple mega-patch covers 34 Mac OS X security issues

Apple has shipped another mega-update to address security vulnerabilities affecting Mac OS X users, warning that the most serious issues could lead to arbitrary code execution attacks. The update, available for Tiger and Leopard, addresses a total of 34 documented vulnerabilities, some in third-party components like ClamAV,...

Tags: Security, Apple Mac OS, Apple Macintosh, Password, DNS, Apple Inc., Apple Mac OS X, Arbitrary Code Execution, Application Termination, CVE-2008-1382, Domain Names, Networking, Internet, Ryan Naraine

Blog posts 2008-09-15

Apple plugs gaping QuickTime security holes

Apple today released a major makeover to its iTunes and QuickTime software products, fixing at least 11 documented security vulnerabilities that could lead to Mac and PC takeover attacks. QuickTime 7.5.5, which should be considered an "extremely critical" update, address nine different vulnerabilities that could cause some...

Tags: Security, Apple Macintosh, Apple QuickTime, Microsoft Windows XP, Service Pack 2, Movie, SP3, Microsoft Windows Vista, Apple Inc., Arbitrary Code Execution, Apple iTunes, Application Termination, Movie File, PICT, Apple Mac OS X, Apple Mac OS, Microsoft Windows XP Service Pack 2, Digital Music, Digital Media, Microsoft Windows, Operating Systems, Software, Personal Technology, Consumer Electronics, Ryan Naraine

Blog posts 2008-09-09

Apple finally ships DNS flaw fix, patches 16 other Mac OS X holes

[ UPDATE: nCircle Andrew Storms reports that the DNS client on the OSX 10.4.11 distribution still has not been patched.  ] Apple has shipped a Mac OS X security update with patches for at least 17 documented vulnerabilities, including a fix for the serious DNS...

Tags: Apple Macintosh, DNS, Patch Management, Apple Inc., Issue, Arbitrary Code Execution, Flaw, Application Termination, Apple Mac OS X, Apple Mac OS, Domain Names, Operating Systems, Software, Internet, Ryan Naraine

Blog posts 2008-07-31

Apple ships (long overdue) iPhone security patches

Finally, after months of waiting, iPhone users finally get security fixes for a batch of known software vulnerabilities. The latest iPhone 2.0 and iPod Touch 2.0 update patches at least 13 documented vulnerabilities, including several code execution holes in the Safari mobile Web browser. The...

Tags: Apple iPhone, Apple Safari, JavaScript, Apple Inc., Web Site, Arbitrary Code Execution, Application Termination, Memory Corruption, Web Site Development, Web Technology, Security, Internet, Ryan Naraine

Blog posts 2008-07-11

Apple releases patches for dangerous QuickTime flaws in Apple TV 2.1 product

Apple released patches for its Apple TV 2.1 product yesterday. Some of you might be saying, why do I care, I don't use Apple TV. Well, if you do use Apple TV, you obviously should care as some of these are very serious flaws, but if you don't,...

Tags: Apple QuickTime, Movie, Patch Management, Apple Inc., Issue, Apple TV, Arbitrary Code Execution, Flaw, IMPACT, CVE-ID, Application Termination, Nathan McFeters

Blog posts 2008-07-11

Apple plugs 25 Mac OS X security vulnerabilities

Apple has shipped another Mac OS X monster update to fix a total of 25 documented vulnerabilities that could lead to arbitrary code execution attacks. With Security Update 2008-004, Apple fixes code execution flaws in Launch Services, SMB File Server, System Configuration, VPN and WebKit. ...

Tags: Security, Apple Macintosh, Apple Inc., Arbitrary Code Execution, Small And Medium Business, Apache Tomcat, Application Termination, Apple Mac OS X, Apple Mac OS, Smb/Sme, Operating Systems, Software, Ryan Naraine

Blog posts 2008-06-30

Apple plugs eight more QuickTime holes

Apple today shipped its fifth QuickTime security update for 2007, patching at least eight vulnerabilities that could cause code execution attacks on Mac OS X, Windows XP and Windows Vista systems.The skinny, according to this Cupertino alert:CVE-2007-2295 -- A memory corruption issue exists in QuickTime's handling of H.264 movies....

Tags: Apple, Botnets, Browsers, Data theft, Exploit code, Metasploit, Microsoft, Mozilla, Passwords, Patch Watch, Pen testing, Responsible disclosure, Rootkits, Spam and Phishing, Spyware and Adware, Viruses and Worms, Vulnerability research, Zero-day attacks

Blog posts 2007-07-11

Serious QuickTime bugs bite Windows Vista, Mac OS X

Multiple flaws in Apples QuickTime media player could put millions of Windows and Mac users at risk of code execution attacks, Apple confirmed in an advisory issued today.A mega-update from Cupertino plugs a total of eight code execution vulnerabilities in QuickTime, all affecting Windows Vista, Microsofts new operating system. The...

Tags: Digital rights management, Pen testing, Viruses and Worms, Exploit code, Spyware and Adware, Spam and Phishing, Vulnerability research, Rootkits, Windows Vista, Microsoft, Apple, Patch Watch, Hackers

Blog posts 2007-03-05

Additional Resources

Gulf of execution

When someone mentions the "gulf of execution" I tend to think Tonkin or bay of pigs, but in IT the term has another meaning entirely - more akin. I think, to "gulf of delusion" than anything to do with geography or mission. by Paul Murphy

Tags: Gulf, Wireless LANs, Wi-Fi, Identity Theft, Wireless, Security, Paul Murphy

Blog posts 2008-12-02

Hackers boot Linux on iPhone

A new front has opened in the ongoing arms race between Apple and iPhone hackers, with one hacker group making the iPhone boot with a Linux 2.6 kernel. A new front has opened in the ongoing arms race between Apple and iPhone hackers, with one hacker group making the...

Tags: Apple iPhone, Hacker, Linux, Hacking, Operating Systems, Software, Security, Apple, hackers, iPhone, OS X, port, kernel, Chris Duckett, Builder AU, Chris Duckett, Builder AU

News items 2008-12-01

Survey: CIOs 'out of the loop'

CIOs are often seen as "glorified IT directors", looking after the day-to-day running of IT systems, instead of being used to align IT with business aims. Chief information officers are "out of the loop", according to a survey carried out by London-based Deloitte and the Cranfield School of Management....

Tags: CIO, Role, Strategy, Management, IT mangement, survey, IT systems, Tom Espiner ZDNet.co.uk

News items 2008-12-01

Who gains from Microsoft's free Morro antivirus?

Microsoft is dropping its subscription-based antivirus software in favor of a free package, code-named 'Morro'. ScanSafe Internet-security expert Mary Landesman investigates Microsoft's motives. Commentary--Microsoft is to replace its paid-for antivirus product with a free one, citing an altruistic desire to spread protection around the world. But many are less...

Tags: Software, Brazil, China, India, Microsoft Corp., Infection Rate, Internet, Viruses And Worms, Security, Morro, Microsoft, Mary Landesman, antivirus, free, OneCare, ScanSafe, Special from ZDNet UK, Mary Landesman, ScanSafe, Special from ZDNet UK

News items 2008-12-01

'Dumbing down' the security profession

* Ryan Naraine is traveling. Guest editorial by Shyama Rose The market for the development and implementation of source code analysis static and dynamic tools is swelling. Companies are increasingly relying on source code analysis tools to identify security-related vulnerabilities. The demand and reliance...

Tags: Analysis Tool, Vulnerability, Analysis, Tool, Productivity, Security, Ryan Naraine

Blog posts 2008-12-01

Black Friday Deals at the App(le) Store

App Store Apps has a posted a list of over 50 iPhone application that are currently on sale many are free for Black Friday which begins at midnight ET tonight. A sampling: A Binary Clock Signboard Polyomino Puzzles Code Alpha Football...

Tags: Apple MacBook, Apple iMac, Apple Inc., Desktops, Notebooks, Hardware, Notebooks & Tablets, Jason D. O\'Grady

Blog posts 2008-11-27

New worm exploiting MS08-067 flaw spotted in the wild

Microsoft's Security Response Center and McAfee are warning on increased network scanning activity during the last couple of days courtesy of the very latest W32/Conficker.worm exploiting the already patched MS08-067 vulnerability. What's particularly interesting in the latest wave of copycat worms is that W32/Conficker.worm is patching the infected host in...

Tags: Flaw, Malware, Worm, Tool, Cyberthreats, Spyware, Adware & Malware, Viruses And Worms, Productivity, Security, Dancho Danchev

Blog posts 2008-11-26