Oracle continues to torture their loveless stepchild called Java, as well as browser vendors do. They "improved security" which usually equals to "created unexpected headache to millions of the users with no visible reason". We tried our best to overcome the aftermath of this update and rolled out Upload Suite 8.0.52.
As you probably noticed, we have released Image Uploader 6.1 on these weekends. The main reason we did it is to fix the security vulnerabililty reported to us by Microsoft.
All of you who read our blog knows a lot about killbit for Image Uploader and Microsoft Security Advisory (953839) that stoppes using of unsafe versions.
It turned out that vulnerabilities in Image Uploader caused not just killbit problem, but it led to one more aftermath. We are getting more and more complaints from our customer that end users experience issues with Image Uploader if they have Norton Antivirus installed.
As I announced a week ago, Microsoft has released security update which includes killbits for old vulnerable builds of Image Uploader.
Only one week left before Microsoft release Cumulative Security Update for ActiveX killbits. They scheduled it for August 12, 2008 at approx 10am PST.
In my previous post I have mentioned about release of Image Uploader 5.1 (and 4.7) which has a number of security fixes (few known heap overflow and a bunch of potential problems). To prevent malicious persons to exploit these issues, we are releasing a killbit for all version and strongly recommend each customer of Image Uploader to get an update (which is free for appropriate major build).
I have and exciting update about the security issue – we have completed all of our audits and feel we have secured Image Uploader.
It may sound too bold, but I think we can say this way now. We get rid of all known vulnerabilities (we have found few new while testing/refactoring IU).
In short I got two news - a bad one and a good one.