Sårbarheter i Windows, ICQ, Adobe produkter

[brainslicer]

Från Secunia:

 

ICQ Personal Status Processing Buffer Overflow

- Highly critical - From remote

Issued 1 day ago.

 

 

 

Adobe Products BMP Handling Buffer Overflow Vulnerability

- Highly critical - From remote

Issued 8 hours ago.

 

Från sitic:

SR08-144 Adobe - Flera produkter sårbara

 

SR08-143 Microsoft - Allvarlig sårbarhet i Windows

Adobe varnar för säkerhetslucka i Photoshop

http://www.idg.se/2.1085/1.157787

 

 

Tidsfönstret att patcha sina säkerhets hål krymper

http://www.theregister.co.uk/2008/04/21/automated_exploit_creation/

 

Shrinking patch windows hit by automated attacks

Quick and dirty exploit peril

The length of time between the development of security patches and the development of exploits targeting the security holes they address has been dropping for some time.

 

Hackers exploit this period of time - the so-called patch window - to launch attacks against unpatched machines. Typically, exploits are developed by skilled hackers versed in the arcane intricacies of reverse engineering.

 

However, hackers have now begun using off-the-shelf tools to at least partially automate this process, a development that might lead to exploits coming out hours instead of days after the publication of patches.