It seems like the vulnerability researchers have gotten over their winter slumber and are back in action. This week has seen a string of critical issues:
- Aurigma Image Uploader Control Remote Buffer Overflow Vulnerabilities. This impacts Facebook and MySpace users (Facebook Photo Uploader Control Remote Buffer Overflow Vulnerabilities)
- Nero Media Player M3U File Processing Buffer Overflow Vulnerability
- Apple iPhoto Photocast Handling Remote Format String Vulnerability
- Sun Java Runtime Environment Remote Code Execution Vulnerabilities
- Yahoo! Music Jukebox ActiveX Multiple Buffer Overflow Vulnerabilities
The interesting thing about this batch is that most of these are likely to be below the radar for most patching systems. Sun’s JRE might be checked, but if users install the others I doubt they’ll notice these alerts on their own.