Safari Update Released

Apple has released a new version of their Safari web browsers. Version 5.1.7 contains fixes to four security vulnerabilities. Some of these may lead to an unexpected application termination or allow an attacker to execute arbitrary code in affected system.

Affected are Safari versions earlier than 5.1.7. Users of vulnerable Safari versions can get the latest version here.

More information of the security content of 5.1.7 can be read here.

Security Updates From Adobe

Adobe have released patched versions of Adobe Illustrator, Adobe Photoshop, Adobe Flash Professional and Adobe Shockwave Player products. Each of these updates contains fixes to vulnerabilties that may allow an attacker to take control of the affected system.

*Adobe Illustrator update related security bulletin

*Adobe Photoshop update related security bulletin

*Adobe Flash Professional update related security bulletin

*Adobe Shockwave Player update related security bulletin

Microsoft Security Updates For May 2012

Microsoft has released security updates for May 2012. This month update contains seven security bulletins of which three critical and four important. A new version of Windows Malicious Software Removal Tool (MSRT) was released too. More information can be read from the bulletin summary.

ESET Global Threat Report for April 2012

ESET has released a report discussing global threats of April 2012.

TOP 10 threats list (previous ranking listed too):

1. HTML/ScrInject.B (1.)
2. HTML/Iframe.B (3.)
3. INF/Autorun (2.)
4. JS/Iframe.AS (6.)
5. Win32/Conficker (4.)
6. Win32/sirefef (7.)
7. JS/TrojanDownloader.Iframe.NKE (-)
8. JS/Agent (5.)
9. Win32/Dorkbot (9.)
10. JS/Redirector (10.)

Complete report (with a description about each of the above listed threats) can be downloaded here (in PDF format).

Security Update For Adobe Flash Player

Adobe has released an updated version of their Flash Player. The new version fixes a critical vulnerability that could cause a crash and potentially allow an attacker to take control of the affected system.

Affected versions:
-Users of Adobe Flash Player 11.2.202.233 and earlier are recommended to get update 11.2.202.235
-Users of Flash Player 11.1.115.7 and earlier for Android 4.x devices are recommended to get update Adobe Flash Player 11.1.115.8
-Users of Flash Player 11.1.111.8 and earlier for Android 3.x and 2.x devices are recommended to get update Adobe Flash Player 11.1.111.9
-Flash Player integrated with Google Chrome will be updated by Google via Chrome update.

More information can be read from Adobe's security bulletin.

Vulnerabilities In VMware Products

VMware have released new versions of their virtualizing software fixing security vulnerabilities. Some of these vulnerabilities may allow a guest user to potentially execute arbitrary code in host system.

Affected software versions are:
- Workstation 8.0.2 and earlier
- Player 4.0.2 and earlier
- Fusion 4.1.2 and earlier
- ESXi 5.0 prior update ESXi500-201205401-SG
- ESXi 4.1 prior updates ESXi410-201205401-SG, ESXi410-201110201-SG and ESXi410-201201401-SG
- ESXi 4.0 prior updates ESXi400-201105201-UG and ESXi400-201205401-SG
- ESXi 3.5 prior update ESXe350-201205401-I-SG
- ESX 4.1 prior update ESX410-201205401-SG, ESX410-201110201-SG and ESX410-201201401-SG
- ESX 4.0 prior updates ESX400-201105201-UG and ESX400-201205401-SG
- ESX 3.5 prior update ESX350-201205401-SG

Instructions for updating to a non-vulnerable version can be read from the related security advisory.

New Chrome Version Available

Google have released a new version of their Chrome web browser. 18.0.1025.168 contains fixes to three high and two medium catogorized vulnerabilities.

More information in Google Chrome Releases blog.