The BugBlog

RealNetworks Patches Security Hole

For those dwindling few still using RealNetworks media player RealPlayer 10-11 for both Windows and Mac, or Rhapsody 4, it's important to get security patches for a "gaping" security hole that will prevent attackers from sneaking hostile code onto your system. RealNetworks sketchy security bulletin is here, with links to the appropriate patches

iTunes 7.4 Prevents a Music Attack

The Apple iTunes 7.4 update fixes at least one security bug. According to Apple, without the update it may be possible for an attacker to construct a music file that can either crash iTunes or possibly run hostile code. You can get the update via iTune's automatic update feature. Apple credits David Thiel of iSEC Partners for finding the bug

Windows Explorer Saved Search Bug

Microsoft says that Windows Vista and Windows Server 2008 are both vulnerable to a bug in Windows Explorer. An attacker can modify a saved-search file that, when opened and then saved on a computer, may allow remote access. Microsoft has links to patches for Vista and Server 2008 here. In the meantime, be wary of any saved-search files of suspicous origin.

Photoshop Problems on Dual-Monitor Setups

If you are using Adobe Photoshop CS3 on a Windows XP or Vista computer, and you are using a dual monitor set-up with Photoshop on the second monitor, File > Open or File > Save As dialog boxes may disappear after briefly being displayed. Adobe suggests pressing ESC and then re-opening the missing dialog box. If that doesn't work, try one of the alternative work-arounds listed here.

iChat and Firewalls

Apple says that the version of iChat that comes with Mac OS X 10.5 should be able to easily work through firewalls and NAT devices. However, if you are having problems you may want to check out Apple's help here. Note that iChat will try to use UDP port 16402 by default. If that port is closed, it will check the next ten lowest ports. Hopefully, you can set up your firewall or NAT device to be compatible with that.

Fixing Access 2007 Query Problem

If you upgrade from Microsoft Access 2003 to Access 2007 SP1, you may notice that queries with JOIN expressions may, according to Microsoft, work up to 10 times slower than before. They've fixed this in the KB95457 hotfix. Get the fix here.

The Sound Recorder Never Sleeps

Microsoft points out that in Windows Vista if the Sound Recorder is running, it will prevent the computer from going to sleep. This is by design -- they don't want a recording to be interrupted by the computer inadvertently going to sleep. If you want it to go to sleep, you need to turn off the Sound Recorder

Blackberry Bug

Research in Motion has issued a security bulletin outlining a security threat on the BlackBerry Enterprise Server  4.1 Service Pack 3 (4.1.3) through 4.1 Service Pack 5 (4.1.5). The bug may let an attacker send hostile code hidden in a PDF file. When opened on a Blackberry smart phone, the bad code will run. Fix this by upgrading to Enterprise Server software version 4.1 Service Pack 6 (4.1.6).

Adobe Web Gallery Doesn't Like Mac OS X 10.5

Run the Web Photo Gallery plug-in that comes with Adobe Photoshop CS2 or Adobe Photoshop Elements 4on a Mac OS X 10.5 computer, and you may get a crash. Adobe says this plug-in is incompatible with OS X 10.5. Get the new update here.

Apple Has MobileMe Syncing Error

Apple says that while doing a MobileMe sync, you may get this error message
- Error Code 5006
This error means you are running out of space on your iDisk, which interferes with the sync process. Apple has a seven-step process you can follow to fix this error. Find the steps here.