HP Quick Launch Button Update (2007-Dec)

The HP Quick Launch Button (QLB) has a nice Remote Execution of Arbitrary Code, Gain Privileged Access vulnerability.
HP Compaq business notebook PCs and HP Pavilion and Compaq Presario consumer notebook PCs all ship with Quick Launch Button (QLB) software preinstalled.

A potential security vulnerability has been identified with the HP Quick Launch Button (QLB) software running on Windows. The vulnerability could be exploited remotely to execute arbitrary code or to gain privileged access. [1]

Grab the patch from HP SoftPaq SP38166

This package provides a critical security update for HP Quick Launch Buttons on the supported notebook models and operating systems. This patch removes a security vulnerability by disabling HP Info Center. [2]

And you will need to apply the patch because: Removing or un-installing Quick Launch Button software does not eliminate the vulnerability. [1]

[1] ESB-2007.1018 — [Win] — HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access (2007-DEC-17) [AUSCERT]
[2] HP Quick Launch Buttons Critical Security Update 1.00 REV: A (2007-DEC-12) [HP]
[3] Got a HP laptop and running windows? Time to patch! (2007-DEC-19) [SANS]

That’s not a rat, this is a rat …

Tim Cox this morning on ABC 774 was getting callers to ring in to support him having a ‘Giant Rat’ story on the Morning Show. After calling in to vote for the rat, I remembered that this was a topic I was going to put into the blog earlier in the week. For all your ‘giant rat’ needs;

A tiny possum and a giant rat were recorded by scientists as probable new species on a recent expedition to Indonesia’s remote and virtually unknown “Lost World” in the pristine wilderness of western New Guinea’s Foja Mountains. [1]

The Foja wilderness is part of the great Mamberamo Basin located in Indonesia’s Papua province and is one of the least disturbed regions in the Asia-Pacific region.

Mammalogist Martua Sinaga holds this 1.4 kg giant rat that is probably a species new to science.
Foja Mts, western New Guinea, Indonesia.
[Copyright: Bruce M Beehler/Conservation International]

During the June expedition, the team documented two mammals, a Cercartetus pygmy possum, one of the world’s smallest marsupials, and a Mallomys giant rat, both currently under study and apparently new to science. They also recorded the mating displays of several rare and little-known birds for the first time.

“The giant rat is about five times the size of a typical city rat,” said Kristofer Helgen, a scientist with the Smithsonian Institution in Washington, D.C. “With no fear of humans, it apparently came into the camp several times during the trip.”

The film crew obtained the first film documentation of several spectacular birds found in Foja, capturing on tape the full courtship displays of the golden-fronted bowerbird (Amblyornis flavifrons) and of the black sicklebill bird of paradise (Epimachus fastuosus).

They also recorded the “lost” Bird of Paradise – Parotia berlepschi (known as Berlepsch’s six-wired bird of paradise), and the newly described wattled smoky honeyeater (Melipotes carolae), both known only from the Foja Mountains. [1]

[1] Indonesia’s “Lost World” Reveals More Surprises (2007-DEC-17) [Conservation International]
[2] Giant rat found in ‘lost world’ (2007-DEC-17) [CNN.com/Asia]
[3] Huge rat discovered in Indonesia (2007-DEC-18) [BoingBoing]

Flash Player update (2007-DEC-18)

Get thee to a patchery;

Flash Player update available to address security vulnerabilities [1]
Release date: December 18, 2007
Vulnerability identifier: APSB07-20
CVE number: CVE-2007-6242, CVE-2007- 4768, CVE-2007-5275, CVE-2007- 6243, CVE-2007- 6244, CVE-2007- 6245, CVE-2007-4324, CVE-2007- 6246, CVE-2007-5476
Platform: All platforms
Affected software versions: Adobe Flash Player 9.0.48.0 and earlier, 8.0.35.0 and earlier, and 7.0.70.0 and earlier.

Upgrade to the newest version 9.0.115.0 (Win, Mac, Linux), by downloading it from the Player Download Center, or by using the auto-update mechanism within the product when prompted.

You can check your version via the About Flash page.

[1] Flash Player update available to address security vulnerabilities (2007-DEC-18) [Adobe]
[2] Adobe Flash Player and GoLive security updates (2007-DEC-19) [SANS]