full-disclosure - Microsoft Patches Binary Planting Issues In Various Vendors' Products

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <8A77632B1E14403DB7A8929E221E6A52@acros.si>
Date: Wed, 13 Apr 2011 17:40:09 +0200
From: "ACROS Security Lists" <lists@...os.si>
To: <bugtraq@...urityfocus.com>, <full-disclosure@...ts.grok.org.uk>,
	<cert@...t.org>, <si-cert@...es.si>
Subject: Microsoft Patches Binary Planting Issues In
	Various Vendors' Products


The latest security updates from Microsoft fix binary planting issues (loading of
dwmapi.dll) in the following applications (and probably many more):

1. Autodesk 3ds Max 2010 Release 12.0
2. Autodesk 3ds Max 2011 Release 13.0
3. Avast! Free Antivirus 5.0.545
4. Avira Premium Security Suite 10.0.0.542
5. BitDefender Total Security 2010 - Build 13.0.17.343
6. CorelDraw X5 15.1.0.588
7. Corel Paint Shop Pro Photo X3 13.2.0.41
8. CyberLink PowerDirector 8.00.2220
9. EMC QuickScan Pro Demo 4.7.0 (build 8554)
10. EMC ApplicationXtender Document Manager v6.50.124.0
11. Microsoft Office Professional 2010 14.0.4760.1000 (32-bit)
12. Nuance PDF Converter Professional 6.0
13. PC Security Shield Security Shield 2010 13.0.16.313

More information and recommendations for developers on our blog:
http://blog.acrossecurity.com/2011/04/microsoft-patches-binary-planting_13.html


Best regards,

Mitja Kolsek
CEO&CTO

ACROS, d.o.o.
Makedonska ulica 113
SI - 2000 Maribor, Slovenia
tel: +386 2 3000 280
fax: +386 2 3000 282
web: http://www.acrossecurity.com

ACROS Security: Finding Your Digital Vulnerabilities Before Others Do
 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/