CDSA News

Weekend Vulnerability and Patch Report, July 13, 2014 (Citadel Information Group)

Important Security Updates

Adobe Flash Player: Adobe has released version 14.0.0.145 to fix at least 3 moderately critical vulnerabilities in its Flash Player for the Windows and Mac versions. Updates are available from Adobe’s website. Updates are also available for Adobe AIR.

Apple iTunes: Apple has released version 11.3 of iTunes for Windows (32-bit). Updates are available from Apple’s website.

Avira Antivirus: Avira has released version 14.0.5.464 of its free Antivirus. Updates are available from Avira’s website.

Malwarebytes Anti-Exploit: Malwarebytes has released version 1.03.1.1220 of its free Malwarebytes Anti-Exploit. Updates are available from Malwarebytes’ website.

Microsoft Patch Tuesday: Microsoft released several updates addressing at least 29 security vulnerabilities, some of which are highly critical, in Windows, Office, Internet Explorer, and more. This release of updates specifically fixes at least 24 highly critical vulnerabilities in Internet Explorer. Updates are available via Windows Update or from Automatic Update.

Skype: Skype has released Skype 6.18.0.105. Updates are available from the program or Skype’s website.

TechSmith Corporation SnagIt: TechSmith has released version 12.1.0.1322 for SnagIt. Updates are available from TechSmith’s website.

Current Software Versions

Adobe Flash 14.0.0.145 [Windows 7: IE]

Adobe Flash 14.0.0.145 [Windows 7: Firefox, Mozilla]

Adobe Flash 14.0.0.145 [Windows 8: IE]

Adobe Flash 14.0.0.145 [Macintosh OS X: Firefox, Opera, Safari]

Adobe Reader 11.0.07

Dropbox 2.8.4

Firefox 30

Google Chrome 35.0.1916.153

Internet Explorer 11.0.9600.17126

Java SE 7 Update 60

QuickTime 7.7.5

Safari 5.1.7

Safari 7.0.4 [Mac OS X]

Skype 6.16.0.105

For Your IT Department

Cisco IOS XR: Secunia reports that Cisco has released updates for its IOS XR to fix a vulnerability. Update to version 5.1.3.9i.BASE or 5.2.2.11i.BASE.

Novell iManager: Secunia reports that Novell has released updates for its iManager to fix reported vulnerabilities in previous versions.