SECURE IT ALERT: Vulnerabilities & Patches in Apple, Adobe, & Microsoft products

Homeland Secure IT Alert for Wednesday, June 09, 2010

Greetings and salutations!

A number of vulnerabilities have been announced this week which may affect your network and computer systems. In most cases the solution is provided in the form of a link.

MICROSOFT WINDOWS, INTERNET EXPLORER, OFFICE, SHAREPOINT SERVICES & .NET FRAMEWORK:

-CRITICAL-

Microsoft has released updates for Windows OS, Internet Explorer, Office, SharePoint Services and the .NET Framework. These vulnerabilities may allow an attacker to execute arbitrary code.

The solution – Update, update, update.

Microsoft instructions for applying the patches to prevent this are located here:

http://www.microsoft.com/technet/security/bulletin/ms10-jun.mspx

ADOBE FLASH PLAYER, READER & ACROBAT:  -CRITICAL-

Adobe announced that critical vulnerabilities have been identified in Adobe Flash Player 10.0.45.2 and earlier 10.x versions, Flash Player 9.0.262 and earlier 9.x versions, Adobe Reader 9.3.2 and earlier 9.x versions and Adobe Acrobat 9.3.2 and earlier 9.x versions Other products that support Flash may also be vulnerable, including Photoshop, Photoshop Lightroom, Freehand MX and Fireworks.

These vulnerabilities could allow an attacker to run malicious code on the affected systems.

Adobe recommends users to update to the latest versions of their products and apply the latest update patches. Primarily upgrading to the release candidate of Flash Player 10.1 or optionally uninstall Flash or restrict which sites are allowed to run Flash.

This affects the Microsoft Windows and Mac OS X platforms, as well as GNU/Linux distributions.

Adobe instructions can be located here:

http://www.adobe.com/support/security/advisories/apsa10-01.html

APPLE SAFARI VULNERABILITIES PATCHED: -CRITICAL-

Apple has plugged 48 security holes in the Safari browser. Some of these vulnerabilities could allow an attacker to execute arbitrary code by convincing a user to open a specially crafted web page. Exploit code is publicly available, so please do not hesitate in updating.

Apple Safari update information is available here:

http://support.apple.com/kb/HT4196

As always, keep your operating systems, applications and Anti-Virus up to date, and you will avoid most problems.

If we can be of any assistance at all, please do not hesitate to contact us…

Enjoy your hump day!