Microsoft Released 4 Updates for Windows & Office (22 Vulnerability Fixed)



Microsoft today issued 4 updates to Windows and Office fixing a total of 22 vulnerabilities, just one of them rated critical. The first and most serious is MS11-053: Vulnerability in Bluetooth Stack Could Allow Remote Code Execution, which patches a single vulnerability (CVE-2011-1265) in the Windows 7 and Vista Bluetooth stacks. This is a remote code execution vulnerability over a wireless protocol, but it's not as serious as it first sounds.
There are considerable mitigating factors. Microsoft gives this bug an exploitability index rating of 2, meaning that they don't expect reliable exploit code to turn up. Attacks would likely, at worst, amount to a denial of service, i.e. a crash. And of course, the system has to have Bluetooth enabled in order to be vulnerable.
There is also a discoverability challenge to any attack; by default, Bluetooth addresses are not discoverable. If you were in communication with a device that wished to attack there are ways to brute force the address, but these are time-consuming and would get past just one of the many barriers to attack here.

MS11-054 is Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege which fixes 15 elevation of privilege vulnerabilities, affecting all versions of Windows and all rated important. The attacker must have valid logon credentials and ability to log on locally. Almost all of these were reported by Tarjei Mandt of Norman, who has made a study of this part of Windows.

MS11-055 fixes a single remote code execution vulnerability in Visio 2003 SP3. This is another of the remote binary planting bugs which Microsoft has been fixing in various products for some time and will for some time to come.
Finally, 
MS11-056: Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege fixes 5 vulnerabilities in the CSRSS of every version of Windows. As with MS11-054, the attacker must have valid logon credentials and ability to log on locally.
Microsoft also released a number of non-security updates for Windows including the usual Windows Mail Junk Filter and MSRT (Malicious Software Removal Tool). Other updates affect Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista and Windows Embedded Standard 7.


-News Source (PC Blog)



SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-

Apple releases iOS 5 beta 3

 
Apple on Monday released a new build of its iOS 5 beta software to developers. The new build — iOS 5 beta 3 — is available for all applicable iOS devices including the iPhone 4, iPhone 3GS, iPad 2, iPad, Apple TV, and third and fourth-generation iPod touch devices. Apple also released the third beta of iTunes 10.5 alongside the new iOS release of course, and it will be necessary for developers to install iTunes 10.5 beta 3 in order to load the new iOS beta on their devices. Hit the break for the full change log included with this release.

Notes and Known Issues

The following issues relate to using the 5.0 SDK to develop code.

Accounts

  • When creating an iCloud account you can use any Apple ID provided it is a full email address and not a MobileMe account. If you have a MobileMe account, you can copy data from that account to an iCloud account to use during testing. You can find more information on iCloud at: http://developer.apple.com/icloud
  • When setting up an iCloud or MobileMe account using the setup assistant and leaving Find My iPhone on, it might actually turn Find my iPhone off after the setup. Please verify in Settings/Mail, Contacts, Calendar/YourAccount that Find my iPhone is toggled On after leaving the setup assistant.
  • There is a problem finding a device using Find My iPhone on the MobileMe website (www.me.com) when switching from iCloud back to MobileMe. To workaround this issue:
    • On the device go to Settings->Mail, Contacts, Calendar-><your_account>@me.com and Toggle Find My iPhone off and back on. Now the device should show up on MobileMe website.
  • It is recommended that you disable Bookmarks on multiple accounts. If they are enabled, the results might be undefined.
  • NEW: In this beta the option of “Choosing a security question” is not working during an iCloud account setup.

Air Play

  • Starting in iOS 5, video content in applications and websites are AirPlay-enabled by default.
  • iOS 5 supports AirPlay of video via AV Foundation.
  • FIXED: The Apple TV screen saver may degrade mirroring performance over AirPlay. The screen saver can be disabled in Apple TV settings.

Apple TV

  • Apple TV Software beta enables users to mirror the contents of an iPad 2 to an Apple TV (2nd generation) using AirPlay. This beta software also enables Photo Stream on Apple TV so users can access photos stored in iCloud. Apple TV Software beta is being provided to test the latest AirPlay functionality with your iOS 5 apps and web sites. If you wish to install Apple TV Software beta on your device, you must first register your device UDID in the iOS Developer Program Portal.

Audio

  • Using voice chat in iOS 5 requires setting the kAudioSessionMode_VoiceChat mode on the Audio Session, or setting the AVAudioSessionModeVoiceChat mode on the AVAudioSession object.

CalDav

  • FIXED: After creating a recurring event locally on the device, the device stops syncing after hitting an error on merge. Removing and re-adding the account acts as a workaround for this.

Calendar

  • All MobileMe calendars were duplicated after turning calendar syncing off and back on.
  • If you launch or manually refresh Calendars on an iPad, your calendars might disappear and you will have to tap “Show All Calendars” to display them again.
  • NEW: Restoring from a Seed 1 backup or earlier will cause MobileMe/iCloud calendars not to sync. Subscribed calendars will show up in Calendars but none of your event calendars will appear in MobileCal. To workaround the problem please remove and re-add the account.

Game Kit

  • Match data for turn based matches is currently limited to 4 KB of data.

Game Center

  • If you have an existing Game Center account which has not yet gone through the first-time Game Center flow in iOS 5, you will encounter a crash when signing into a game’s login alert directly. The workaround for this is to launch Game Center to complete the first-time flow.

i-Books

  • iBooks 1.2.2 may fail to display some text or images in books. Please update to iBooks 1.3 in the App Store.

i-Cloud Backup

  • As this is beta software, it is recommended that you do not use the iCloud services to store any critical data or information. If you enable iCloud Backup, automatic backup with iTunes when syncing will be disabled. We suggest you also manually back up your device with iTunes.
  • In the iOS 5 beta, support for data protection in iCloud Backup is unavailable. Apps that have protected files will not have any of their data or metadata backed up as a result.
  • After restoring, you may not be able to back up again because the device still thinks it’s restoring. To workaround this issue try syncing apps or media that are missing form iTunes or try deleting your iCloud account and adding it back.
  • If you delete your backup, the feature will be disabled but settings may still indicate that it is enabled and you will have to toggle the BackUp to Cloud switch in Settings.
  • For compatibility reasons, this version of the iOS 5 beta requires that all files be backed up again, instead of only those files that have changed since your last backup. This may cause a warning that your account is over quota. In case the warning occurs, you can delete your oldest backup to free up space and then initiate a backup.

i-Cloud Storage

  • During the iOS 5 beta period, any documents stored on the servers might be purged periodically before GM. Therefore, it is highly recommended that you do not store any critical documents or information on the servers.
  • If your application is using the NSMetadataQuery class, you must set a predicate, even though the predicate itself is ignored.
  • The Foundation framework doesn’t include the team ID when looking for an app’s mobile documents container. The Team ID must be included at the beginning of the identifier string passed to theURLForUbiquityContainerIdentifier: method.
  • In this beta, the setSortDescriptors: method of NSMetadataQuery is not supported.
  • In this beta, if you want to use iCloud, you have to manually specify various container identifiers (your application’s Display set) within an Entitlements file for both of your Mac OS X and iOS projects.
  • There are issues using the Cloud Storage document API in conjunction with protected data which can lead to data corruption.
  • In this beta, document-based applications cannot always detect when files change, move, or are deleted out from underneath them.
  • NEW: In this beta, file presenters (objects that adopt the NSFilePresenter protocol) do not receive some of the messages that they’re supposed to receive, especially:
    • presentedItemDidChange
    • presentedSubitemDidAppearAtURL:
    • presentedSubitemDidChangeAtURL:
    You can workaround this by implementing the relinquishPresentedItemToWriter: method and checking to see if the writer actually wrote when your file presenter reacquires. You can also use FSEvents to observe file system changes
  • In this beta, messages about changes to files in a directory are not getting delivered to objects that adopt the NSFilePresenter protocol.
  • While reporting a bug related to the iCloud storage interfaces, please include the logs collected during your debugging session. To generate these logs, you must install a special debug profile on your device.The debug profile can be obtained from http://connect.apple.com. This profile enables the generation of debug logs that are needed to diagnose any problems using iCloud storage. The instructions to collect the logs are:
    1. Install the profile. (The easiest way to do this is to mail it to yourself and open the attachment on their device.)
    2. Reproduce the bug.
    3. Sync with iTunes to pull the logs off your device.
    4. Attach the logs to your bug report. You can find the logs in ~/Library/Logs/CrashReporter/MobileDevice/DeviceName/DiagnosticLogs.
    These logs can grow large very quickly, so you should remove the profile after you have reproduced the problem and pulled the logs for the bug report.

i-Message

  • NEW: i-Message beta 3 will be unable to communicate with iMessage users on beta 1. It works between beta 3 and beta 2.
  • NEW: Modal alerts don’t appear for iMessages.

iTunes

  • The version of iTunes that comes with beta 3 cannot sync devices that have the beta 2 software installed. To avoid this problem, do the following:
    1. Sync any devices that have beta 2 installed to the version of iTunes that came with beta 2.
    2. Upgrade iTunes to the version that comes with beta 3.
    3. Connect the device and install the beta 3 software. (Understand that you might see a failure to sync error when you first connect the device.)
    4. After installing the beta 3 software, restore from your the backup you made in step 1.
  • Videos purchased from the iTunes Store do not play on a 2nd generation AppleTV over AirPlay with iTunes 10.5.

MMS

  • Sending an MMS of large videos does not work.

Photo Adjustments

  • If you apply red-eye adjustments in iOS, and import your image into the iPhoto seed build, the red-eye adjustments will not appear on that image in iPhoto. As a result, subsequent syncing of your image back to the iOS device from iPhoto will not show the red-eye adjustments.

Reminders

FIXED: The Reminders application does not send notifications for reminders that are based upon the entry (and/or exit) of a location if there is no date associated with the reminder.

Settings

  • The “Back Up Now” button is enabled without the backup data class being enabled for the account.
  • FIXED: If you bring up the keyboard of the terms in Settings->General->Software Update, you cannot dismiss it. You have to force quit Settings to get out.
  • NEW: In this beta FaceTime icon is missing in Settings on the iPhones.

Simulator

  • NEW: Location services are not functional in iOS 4.3 simulator running on Mac OS 10.7 with Xcode 4.2.

Springboard

  • Push and local notifications for apps appear in the new Notification Center in iOS 5. Notification Center displays notifications that are considered “unread”. In order to accommodate push and local notifications that have no “unread” status, developers can use their application badge count to trigger a clearing of notifications from Notification Center. When an application clears its badge count (by setting it to zero), iOS 5 will clear its notifications from Notification Center.

Twitter

  • NEW: When tweeting your location from Safari and exiting before the location can be established, the location arrow will stay in the status bar. The arrow can be removed by killing Safari from the task switcher.

UI Automation

  • NEW: In iOS 5 beta 3, the first execution of a script after a reboot or erase install will likely fail. Subsequent attempts should succeed until the device is rebooted again.
  • The play and record buttons in the Automation instrument script editor may not work properly after targeting an application that was launched by a trace session and has ended. They may also not work if you target an application that was suspended. If you run into this problem and it persists, you may need to close and reopen the trace document to get back into a functional state.
  • When capturing actions into a script using the Automation instrument, interfaces with web views or table cells that contain a high number of off screen elements may take an extremely long time before returning with an expression.
  • The lock() and unlock() functions of UIATarget have been replaced with the lockForDuration(<seconds>) function.
  • Instruments overwrites the loaded automation script, even if another program is editing it.
  • Starting iOS 5 beta 2, you can now trigger the execution of an UI Automation script on an iOS device from the host terminal by using the instruments tool. The command is:
    • instruments -w <device id> -t <template> <application>

UIKit

  • NEW: Starting in iOS 5 beta 3, the exclusiveTouch property of UIControl has returned to its original default value of NO.
  • Returning nil from the tableView:viewForHeaderInSection: method (or its footer equivalent) is no longer sufficient to hide a header. You must override tableView:heightForHeaderInSection: and return0.0 to hide a header.
  • In the iOS 5 beta, the UITableView class has two methods to move one cell from one row to another with defined parameters. These APIs are:
    • moveSection:toSection:
    • moveRowAtIndexPath:toIndexPath:
  • Using the UIWebView class in Interface Builder, setting transparent background color is possible in iOS 5. Developers compiling against the new SDK can check their XIB for the UIWebView transparent setting.
  • In the iOS 5 beta, the UINavigationBarUIToolbar, and UITabBar implementations have changed so that the drawRect: method is not called on instances of these classes unless it is implemented in a subclass. Apps that have re-implemented drawRect: in a category on any of these classes will find that the drawRect: method isn’t called. UIKit does link-checking to keep the method from being called in apps linked before iOS 5 but does not support this design on iOS 5 or later. Apps can either:
    • Use the customization API for bars that in iOS 5 and later, which is the preferred way.
    • Subclass UINavigationBar (or the other bar classes) and override drawRect: in the subclass.
  • The indexPathForRow:inSection:section, and row methods of NSIndexPath now use NSInteger instead of NSUInteger, so that these types match with methods defined on UITableView.
  • There is a known issue with presenting a UIVideoEditorControllerobject where it doesn’t show the selected video, which appears blank instead. In certain cases it may also crash.
  • Touch events are not getting forwarded to the view in the cameraOverlayView property of UIImagePickerController.
  • The imagePickerController:didFinishPickingMediaWithInfo: method of UIImagePickerController is not returning a URL to the video when recording is complete.
  • NEW: When creating a new appointment in calendar app on a device using 24 hr clock, you cannot select an hour value greater than 12. The date-time picker value sets current weekday to be the same as previous day (e.g: a An appointment on Tuesday will be set as Monday).
  • FIXED: We have changed the behavior of scrollToRowAtIndexPath:atScrollPosition:animated: such that UITableViewScrollPositionTop and UITableViewScrollPositionBottom now adjust for the top and bottom portions of the contentInset property.

WebKit

  • NEW: In iOS 5 beta 2, a new inherited CSS property, -webkit-overflow-scrolling: value, is available. The value touch allows the web developer to opt in to native-style scrolling in an overflow:scrollelement. The default value for this property is auto.
  • The WebKit framework has picked up a newer WebKit engine, which closely matches Safari 5.1. Some areas to be aware of with the new WebKit framework on iOS:
    • There is a new HTML5-compliant parser.
    • Text layout width may change slightly because word-rounding behavior now has floating-point-based precision.
    • There is improved validation of the <input type=number> form field, which includes removing leading zeros and number formatting.
    • Touch events are now supported on input fields.
    • window.onerror is now supported.
    • There is a new user agent that does not have locale information in the User Agent string.

WiFi Syncing

  • In iOS 5 beta 2, wireless syncing is available for the Mac. It requires iTunes 10.5 beta 2 and OS X 10.6.8 or Lion. You will see an option to enable wireless syncing when you connect your device to iTunes with the USB cable. It is recommended you perform your initial sync with a cable after restoring your device.
    • Wireless syncing is triggered automatically when the device is connected to power and on the same network as the paired computer. Or, you can manually trigger a sync from iTunes or from Settings -> General -> iTunes Sync (same network as paired computer required). Be sure your device is plugged into a power source when performing wireless syncs.
    • If you find issues with apps, media and/or photos synced to your device, you can reset then resync. From Settings -> General -> Reset, choose Erase all Content and Settings. Then reconnect to iTunes and sync again.
  • FIXED: In this beta, iTunes may incorrectly report Photos as “Other” in the capacity bar. Photo syncing otherwise works as expected.
  • NEW:In some cases, your device may fail to sync contacts, calendars and account settings, or back up to iTunes. If this happens, reboot your device and re-sync.
  • NEW:In some cases, syncing photos may result in only thumbnails on your device. If this happens, unsync Photos then re-sync again.

Xcode

  • In this beta, device restores using XCode are disabled. Please use iTunes only to back up and restore your device.
  • In some cases, Xcode 4.2 Organizer does not display a device that is in restore mode. As a workaround you can use iTunes to restore.
  • FIXED: On some desktop machines, Xcode’s memory usage inflates incredibly fast while restoring a device or copying an IPSW. As a workaround use iTunes to restore.
  • FIXED: In this beta, crash logs (either unsymbolicated or symbolicated) do not appear in Xcode Organizer. To make them appear in the Xcode Organizer, you will have to rename the device.
  • In iOS 5 beta 2, the iOS Simulator is not compatible with previous releases of the iCloud Developer Seed for OS X. It is highly recommended that you update to the latest iCloud Developer Seed to ensure compatibility.
iOS 5.0 SDK supports both iOS 4.3 and iOS 5.0 simulators.
 
-News Source (BGR)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-

SQL-i Vulnerability Found By Farhan on Gujarati Magazine CHITRALEKHA's Website


Farhan Ghumra found SQL-i Vulnerability on the official website of Gujarati Magazine "CHITRALEKHA"

Vulnerable Website:-

http://www.chitralekha.com/


Vulnerable Link:-


http://www.chitralekha.com/article2.php?id=6'

Credentials Exposed By the Hacker:-

User Name: admin
Password: 90edfdbd82f1db893c9ceda6b408425e
Email-id: web@chitralekha.com

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-

Crisis Aversion Tool

Crisis Aversion Tool Fix Common Windows Problems with A Single Click The Crisis Aversion Tool (CAT) helps users fixing common Windows problems by resetting services, permissions, networking interfaces, etc to default values and fixing many common issues like printer installer error, USB drive not displaying, and other error

Download Crisis Aversion Tool Here

 

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-

50 Websites Hacked By PakH3X0r

50 Websites Hacked By PakH3X0r
Hacked Sites:-

http://hiennguyen.com.au/blog/
http://zumbacaerphilly.com/
http://www.himee.com/
http://hiphopnowlyrics.com/
http://www.hotinterviewquestio​ns.com/
http://hqworld.net/
http://incyprus.ws/cinema/
http://diplinfotech.com/
http://www.dietandweightlossso​lution.org/
http://diving.so/
http://dog-foodcoupons.com/
http://www.bubblerumble.com/
http://www.101door.com/
http://doorwaypromotions.com/
http://www.dreamhomes.com.sg/
http://drejtesiashqiptare.com/
http://www.dtoficios.com/
http://dyno-top.com/
http://king-android.fr.nf/
http://darknet.fr.nf/
http://fortune-plus.in/
http://easy-money-earn-adhi.co​m/
http://ebookmanual.info/
http://khobraaa.com/
http://edupowers.com/ar/
http://www.atabani.com/eng/
http://elixiroutsourcing.com/
http://enseafood.com/
http://www.ergungunduz.com/
http://erkawebs.com/
http://9err.com/
http://esoftwarereview.com/
http://fanflak.com/
http://fantasticidea.biz/
http://www.finanziamentifondop​erduto.com/
http://fisherherman.com/fhblog​/
http://freepdfebookdownload.co​m/
http://freguez.com/blog/
http://fun4jp.com/
http://ebooks911.com/
http://gang1987.info/
http://hotfileav.com/
http://doujin-games88.net/pass​word
http://georgefixhome.com/
http://www.getinthatdress.com/
http://2getwebsite.com/
http://gologin.us/
http://habiletech.com/
http://healthken.in/blogs/
http://hiennguyen.com.au/blog/
http://zumbacaerphilly.com/
http://www.himee.com/
http://hiphopnowlyrics.com/
http://www.hotinterviewquestio​ns.com/
http://hqworld.net/
http://incyprus.ws/cinema/

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-

#Operation Bohemian Grove By Anon

Anonymous Launches Operation Bohemian Grove July 13. This operation will commence on the dawn of #July13. The first step requires the occupation of Bohemian Avenue and Railroad Avenue. Specifically at the intersection of Bohemian Ave. & Railroad Ave.

Aerial Map view of Bohemian Grove area:-  

http://bit.ly/k3bHAD

Re-Occupation Events:-  

http://opesr.tumblr.com/ro

Civil Disobedience Events:- 

http://opesr.tumblr.com/cd

Twitter Storm:-

#July13 #OpESR #OpBohemianGrove Expect Us: http://t.co/1SFVkXi via #A99

Here is the Video Announcement of Anonymous:- 

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-

CentOS 6 is Now Available


Seven months after the release of Red Hat Enterprise Linux (RHEL) 6.0, the CentOS developers have announced the release of CentOS 6.0. The RHEL 6.0 clone is currently only available as a DVD image for x86-32 and x86-64 systems; however, Live CDs are reportedly in preparation and the developers have also said that they plan to issue a "Minimal Install CD" in the coming days. They also intend to provide information on a "LightWeightServer (LWS) CD" that, similar to the "CentOS 4 Server CD", will contain the key components to set up a server.
Updating from CentOS 4 or 5 to version 6 is not recommended. Until the release of CentOS 6.1, the project plans to provide the security updates Red Hat integrated into RHEL 6.1, as well as those that have been issued since its release, via a "continuous release repository"; further details are to follow within 48 hours of the release of CentOS 6.
CentOS 6.0 is the last of the three most popular distributions whose developers take the RHEL source packages, substitute the protected components (for example, the Red Hat logos), and after recompiling assemble the whole thing into a distribution that is said to be fully compatible with the original. Oracle released its Oracle Linux 6.0 in February, and the Scientific Linux (SL) project released its identically named clone in March. In mid-May, Red Hat released the first minor update to RHEL6, version 6.1. Oracle released a clone of this version in early June; the Scientific Linux developers are still working on theirs. The CentOS developers have not indicated a release date for CentOS 6.1.

To See the Release Note Click HERE
Download: i386 | x86_64


-News Source (The H)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-

Related Posts Plugin for WordPress, Blogger...