zero

Hackers have launched attacks targeting an unpatched flaw in Microsoft PowerPoint, the company warned Thursday.

The vulnerability, which affects Microsoft Office 2000 SP3, 2002 SP3, and 2003 SP3, can be exploited by getting a person to open a PowerPoint file rigged for the attack. When the file is opened, PowerPoint will access an invalid object in memory. That then allows an attacker to remotely execute code on the system.

In a security advisory, Microsoft said that at present, attacks are not widespread but are tailored to affect specific victims.

"Microsoft is investigating new reports of a vulnerability in Microsoft … Read more

Sure, Polaroid might be 6 feet under (or is it?), but casual photo enthusiasts can still enjoy instant gratification with Dell's Dell Wasabi PZ310 Mobile Printer, just announced today.

The Wasabi uses Zero-Ink (ZINK) technology that replaces cumbersome print cartridges with dye crystals embedded right into the proprietary ZINK paper. The crystals are heated as the paper passes through the printer, rendering clear, sharp images in less than a minute for each 2-inch by 3-inch photo.

ZINK also licenses its technology to other companies for their own unique products. For example, look for cameras and ZINK printers to converge … Read more

It's not for road trips, but the van that Zap has introduced at the National Automobile Dealers Association convention might just ease the carbon burden for very local transport.

The Zap Shuttle, which can hold five people, is touted as the nation's first 100 percent plug-in, rechargeable electric van. It's meant to replace small shuttle vans that you see going from airport terminals to rental lots and around other short-range areas such as corporate headquarters, college campuses, indoor warehouses, and sports arenas.

The mini-van has optional accessories, such as solar panels, for prolonged use. It has a … Read more

Microsoft is investigating reports of a flaw in the WordPad Text Converter for Word 97 files, the company said on Tuesday. A Microsoft blog stated "we are aware of very limited and targeted attacks seeking to exploit this vulnerability."

On Wednesday security researchers reported finding a zero-day flaw affecting Microsoft Internet Explorer 7.

According to Microsoft Security Advisory 960906, the flaw only affects users of Windows 2000 Service Pack 4, Windows XP Service Pack 2, Windows Server 2003 Service Pack 1, and Windows Server 2003 Service Pack 2. This issue does not affect Windows XP Service Pack 3, … Read more

One flaw not addressed in yesterday's Patch Tuesday is a heap overflow within the XML parser reported on Wednesday by Bojan Zdrnja of the SANS Internet Storm Center.

The exploit in the wild on Wednesday creates an XML tag, then waits 6 seconds in an attempt to thwart antivirus engines. The exploit could then crash the browser and run malicious code when the browser is restarted. The user must be running Windows XP or Windows Server 2003, and using Internet Explorer 7.

Zdrnja writes that "at this point in time, it does not appear to be wildly used, … Read more

Rafe and Molly square off over the reuse of air conditioning technology, the fail whale sinks a deal between Facebook and Twitter, Gmail is cracked, and an enterprising astronaut creates the ultimate in must-have space tech: a zero-G coffee cup.

Twitter rebuffs a Facebook poke? http://news.cnet.com/8301-17939_109-10106391-2.html

Gmail exploit may allow attackers to forward e-mail http://news.cnet.com/8301-1009_3-10106275-83.html http://www.makeuseof.com/tag/breaking-gmail-security-flaw-more-domains-get-stollen/

EU strikes down French “3 strikes” copyright infringement law http://tech.slashdot.org/article.pl?sid=08/11/23/1952248

Has … Read more

In this week's Security Bites podcast, Robert Vamosi speaks with Ryan Naraine, security evangelist for Kaspersky and Zero Day blogger for ZDNet, about malicious software.

Naraine recently spoke at a conference on emerging security threats sponsored by the Georgia Tech Information Security Center about the increasing risks of malware on social networks, such as Facebook pages that to lead people to Google pages with additional links to malware sites (a two-step infection process), and the more straightforward approach of Facebook being used for botnets.

In this podcast, Naraine and Vamosi talk about the changing nature of threats today and … Read more

Today, Dead Space producer Rich Briggs joins us for the second half of the show to talk about one of the scariest games we've played in recent memory.

But first, we dish out the dirt on video gamer enemy No. 1, Jack Thompson. It seems old Jacky has finally been disbarred from practicing law in the great state of Florida; good riddance. Next, Wilson enlightens us as to why the Internet may be killing our brains and how he knows the guy who can help.

The second half of the show features an interview with Dead Space producer Rich Briggs. We ask Rich all about his terrifyingly good game and what went into making one of the creepiest games of all time. We take live questions from that chat room and see what horror movies influenced Rich and the rest of the Dead Space team.

Finally, our Dan Ackerman contest winner is announced and Zen from Arizona has taken first prize. Check one of his winning submission (Ackerman/Palin), along with some other entries below.

Apple on Tuesday released Bonjour for Windows 1.0.5., patching the DNS vulnerabilities first reported by Dan Kaminsky of IOActive in July. Bonjour for Windows can be found within iTunes. Earlier on Tuesday, Apple released DNS patches for iPod Touch. Bonjour for Windows 1.0.5 may be obtained downloading iTunes 8.0 or from Apple Software Downloads.

mDNSResponder 1 This patch affects users of Windows Vista, XP SP2, SP3, 2003, and 2000. The update addresses null pointer reference issue in CVE-2008-2326. Apple says the problem within Bonjour Namespace Provider lies in resolving a maliciously crafted ".local" … Read more