Tag: File | Page 16

Flaws in Oracle file processing SDKs affect major third-party products

July 21, 2016/in Computer Security

Seventeen high-risk vulnerabilities out of the 276 flaws fixed by Oracle Tuesday affect products from third-party software vendors, including Microsoft.

The vulnerabilities were found by researchers from Cisco’s Talos team and are located in the Oracle Outside In Technology (OIT), a collection of software development kits (SDKs) that can be used to extract, normalize, scrub, convert and view some 600 unstructured file formats.

These SDKs, which are part of the Oracle Fusion Middleware, are licensed to other software developers who then use them in their own products. Such products include Microsoft Exchange, Novell Groupwise, IBM WebSphere Portal, Google Search Appliance, Avira AntiVir for Exchange, Raytheon SureView, Guidance Encase and Veritas Enterprise Vault.

To read this article in full or to leave a comment, please click here

Network World Security

Security holes found in widely-used file compression library, leaving other products dangerously exposed

June 23, 2016/in Computer Security

Researchers have called for users to patch and upgrade their vulnerable software as soon as possible, after three severe vulnerabilities were found in libarchive, a widely-used open source compression library.

Read more in my article on the Tripwire State of Security blog.

Graham Cluley

How a boobytrapped PDF file could exploit your Chrome browser – and it’s not Adobe’s fault!

June 13, 2016/in Computer Security

PDFium, Chrome’s default PDF reader, contained an exploitable vulnerability that could have resulted in malicious code being run on innocent users’ systems.

Read more in my article on the Hot for Security blog.

Graham Cluley