Mozilla has released FireFox 2.0.0.15 which fixes 5 critical ,4 High ,2 Moderate and 1 Low vulnerabilities.

Here’s list of what’s been fixed in this update.

MFSA 2008-33 Crash and remote code execution in block reflow
MFSA 2008-32 Remote site run as local file via Windows URL shortcut
MFSA 2008-31 Peer-trusted certs can use alt names to spoof
MFSA 2008-30 File location URL in directory listings not escaped properly
MFSA 2008-29 Faulty .properties file results in uninitialized memory being used
MFSA 2008-28 Arbitrary socket connections with Java LiveConnect on Mac OS X
MFSA 2008-27 Arbitrary file upload via originalTarget and DOM Range
MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript()
MFSA 2008-24 Chrome script loading from fastload file
MFSA 2008-23 Signed JAR tampering
MFSA 2008-22 XSS through JavaScript same-origin violation
MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15)

There’s been a new flaw found in Internet Explorer that focuses on IE’s inline frames, and affects Microsoft’s Internet Explorer 6, 7, and 8 beta 1, the security flaw could subject users who visit a malicious Web site or open a malicious e-mail message to arbitrary code.

“iframes,” or inline frames, often are used for serving ads, which typically come from a different domain than content that appears on the same Web page.

U.S. CERT describes it as,

“Microsoft Internet Explorer fails to properly restrict access to a document’s frames, which may allow an attacker to modify the contents of frames in a different domain.”

Source — Secunia

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

Mozilla is all set to a create a Guinness World Record for the most for the most software downloads in 24 hours, and that time just got a little bit more closer thats today Firefox 3 will arrive today that is June 17th. To Help its cause, Mozilla is hosting a Download Day event and place “Download Day” buttons on their Web sites as reminders of this big day.

Here’s the time line schedule of when the download of FireFox 3 begins around the world.

Img : courtesy Labnol Click on the image for a larger image.

As of now 1,540,366 people have taken the pledge and If you have not yet taken the pledge to download FireFox, then head http://www.spreadfirefox.com/en-US/worldrecord/

To promote the Download Day you can spread the news with Download Day buttons and banners.

Microsoft has released an update for Windows Live Writer. This update fixes four problems that occur when Windows Live Writer publishes posts to Blogger.

• An error occurs when you publish a post that contains images to Blogger : File Upload Failed: Object reference not set to an instance of an object.
• You cannot publish images to your Windows Live Writer album on Picasa if the folder already contains 500 images : File Upload Failed: The remote server returned an error: (500) Internal Server Error.
• When you click a thumbnail image to view a larger image, a file download box appears.
• Link to images that were previously published to a blog in the blogspot.com domain are broken when the blog is migrated to a custom domain.

As of now the update KB951125 is only present being distributed via Microsoft Update.

Read more about article KB951125 here.

Finally after skipped releases, 1 week after the RC release, Wordpress 2.5 has been released.Wordpress 2.5 has got a complete makeover with its interface and features.

Prominent Changes :

• New dashboard.
• Multiple file upload with progress bar.
• Better tag management
• Automatic upgrade of plugins.
• In built galleries for photos.

Note : Make a backup before you start updating the blog.

You could use plugins the one mentioned below to upgrade your WP Installation

1. WordPress Automatic Upgrade
2. Instant Upgrade plugin

Download Wordpress 2.5 from here.

If you use many plugins you might want to check the plugin compatibility list for WP 2.5 here.

A new version of Firefox has been released, Version 2.0.0.13 fixes 2 critical, 2 high, 1 moderate and 1 low vulnerabilities. No new features have been added in this release.

To check out the release notes of this update click here.

To update your FireFox installation Click Help ( Alt + H )– > Check For Updates ( O ), then press Download and Install Now to updates your firefox.

Download FireFox 2.0.0.13 from here. ( For Fresh Install )

Technorati Tags: FireFox Updates

Microsoft today finally rolled out SP1 of its Windows Vista OS. This new service pack is a collection of all patches, which have been released till now and also include some important changes for the Vista OS. These include a relaxation of Vista’s strict WGA requirements, changes to file-copying problems that have plagued the OS since release and changes the way the OS handled older games that were designed for Windows XP.

This update is currently available through Windows Update and also a Stanalone Installer is available.

In case the update is not available through Windows Update check out KB948343.

Standalone Installer Download Link.

DO NOT CLICK DOWNLOAD THE STANDALONE IF YOU ARE UPDATING JUST ONE COMPUTER: A smaller, more appropriate download is available on Windows Update.

• The download size from Windows Update of Windows Vista SP1 for x86 is 65 MB (compared to 450 MB from the Microsoft Download Center).
• The download size from Windows Update of Windows Vista SP1 for x64 is 125 MB (compared to 745 MB from the Microsoft Download Center).

For users upgrading to this new SP, please note that the following security software are directly affected:
1) BitDefender Antivirus and Internet Security, version 10
2) Fujitsu’s Shock Sensor hard drive protection for rugged laptops
3) Two versions of Jiangmin KV Antivirus software and
4) Check Point Technologies’ Zone Alarm Security Suite.

Note :

1. Things to know before you download Windows Vista SP1, click here.
2. If you have a prior version of the Windows Vista SP1 beta installed, you must uninstall it prior to installing the final version.

Technorati Tags: Vista SP1,Windows Updates