logo
0 anonymous
Views: 1089995 Challenges: 342
Users: 12689 Online: 11

Most Vulnerable Windows Applications in 2008 – 8 Posts

  • Most Vulnerable Windows Applications in 2008

    12/16/2008 16:19
    alt3rn4tiv3's Avatar alt3rn4tiv3 2940
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    [x-posted to hackquest, net-force and my blog]<br><br>yeah yeah. the year hasn't ended yet, but we've already got stuff like the top cybercrimes, top swimsuit design, top hot model, yada yada.<br>bit9 came up with the year's top vulnerable applications on the windows platform and guess who tops the list?<br>.<br>.<br>.<br>.<br>.<br>.<br>.<br>foxy! yeah. firefox, with 10 critical vulns that \"allows hackers to gain control of your computer and steal passwords\".<br>see the whole thing here - http://www.bit9.com/files/Vulnerable_Apps_DEC_08.pdf
  • 12/16/2008 16:19
    quangntenemy's Avatar quangntenemy 7120
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    Not sure but I heard there's a critical IE bug still roaming around too lazy to look into it <img alt="\&quot;:D\&quot;" src="%5C">
  • 12/16/2008 16:19
    Dent's Avatar Dent 170
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    I use two of the applications listed. So is there any replacements for MSN Messenger and Adobe Flash?
  • 12/16/2008 16:19
    alt3rn4tiv3's Avatar alt3rn4tiv3 2940
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    as discussed with rhican in net-force, this document should not be taken seriously. can you believe that safari is listed as a popular application on the windows platform? and internet explorer is totally left out?
  • 12/16/2008 16:19
    Dent's Avatar Dent 170
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    If MSIE isnt there I wouldnt trust that list but I am looking for a replacement for MSN Messenger if that exists.
  • 12/16/2008 16:19
    Towley's Avatar Towley 1790
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    Of course the most used applications are those who are targeted by most \"security researchers\".<br><br>To name some other popular apps:<br>There have been mutliple buffer overflows fixed in Opera lately,<br>Microsoft Word has similar issues currently,<br>libpng is/was also vulnerable to some issue....,<br>the list continues...<br><br>What i like about firefox (and windows maybe) is the auto-update thingy.<br><br>BTW: There are techniques that help applications to defend against security threats and just to name a few things:<br><br>- (On OS basis there should be stack randomization)<br>- as user you should avoid using root/admin account<br>- use NoScript Plugin for Firefox<br><br>PS: Lately some helpful person proposed to abonnement security RSS Feeds. I really can recommend that. I am using Opera to do mail stuff pop3/smtp, and it works not too bad with feeds either.<br><br>Merry Christmas to all<br>Towley
  • 12/16/2008 16:19
    devnull's Avatar devnull 300
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    what about pidgin as a replacement for MSN messenger
  • 12/16/2008 16:19
    Dent's Avatar Dent 170
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    Thanks for the tip. Ill try Pidgin.