Microsoft patch Tuesday to close kernel hole

Seven security updates, six of them classified as critical by Microsoft, will be closed on the upcoming patch Tuesday. The advance notice for the updates notes critical remote code execution holes in Microsoft's .NET framework, Silverlight, Office, Visual Studio, Lync and Internet Explorer. All versions of Windows are affected by at least three of the critical holes and all versions of Internet Explorer are affected by the critical flaw addressed by one of the fixes.

Microsoft patch Tuesday to close kernel code

Microsoft patch Tuesday to close kernel hole | The H Security

Anatomy of a buffer overflow - learning from Apple's latest security update

Apple has released its latest Security Update for OS X. Dubbed simply 2013-003, the update fixes a trifecta of memory corruption bugs in QuickTime caused by buffer overflows.Technically, one of the bugs is listed as a buffer underflow, which is just a buffer overflow the other way round. An overflow writes past the end of your own memory buffer, trampling on the next block of memory, which may well be in use for something else; an underflow writes in front of your memory, with a similarly risky outcome.

Apple`s latest security update

These bug fixes should all be considered critical, because they could be exploited for remote code execution.
In other words, a deliberately-tweaked movie file could trick your Mac into running program code hidden in the movie itself, even though such files are supposed to consist entirely of data.

Apple`s latest security update | Naked Security

Apple releases security update for Mac OS X

Apple has released Security Update 2013-003 for Mac OS X 10.8.4 (Mountain Lion), 10.8.4 Server, 10.7.5 (Snow Leopard), 10.7.5 Server, 10.6.8 (Lion) and 10.6.8 Server. This is the third standalone security update that Apple has released in 2013.

Apple releases security update

The update's advisory note says that there are three QuickTime flaws, specifically buffer overflows when handling Sorenson-encoded movies and H.264 movies, and a buffer underflow when handing "mvhd" atoms. The problems are said to lead to application crashes or, in the worst case, allow arbitrary code execution. All three flaws were reported by researchers working with HP's Zero Day Initiative.

Security update for Mac OS X | The H Security