Adobe Security Vulnerabilities From CERT via Netiquette IQ

As I have stated numerous times in my blogs, Netiquette includes an active security and safety set of processes. With so many security breeches occurring from almost every possible source, it is critical to stay current with security issues where they effect you in a personal, professional or social way. US-Cert is one of the premiere ways to enhance your security processes. Netiquette IQ is committed to provide as much information as possible for its readers not only in online etiquette but in online security as well.

National Cyber Awareness System:

SB14-020: Vulnerability Summary for the Week of January 13, 2014

01/20/2014 06:51 AM EST

Original release date: January 20, 2014

The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center(NCCIC) / United States Computer Emergency Readiness Team(US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information.
The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

·         High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0

·         Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9

·         Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9

Entries may include additional information provided by organizations and efforts sponsored by US-CERT. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletins is compiled from external, open source reports and is not a direct result of US-CERT analysis.

High Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
adobe -- adobe_air	Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.	2014-01-15	10.0	CVE-2014-0491
adobe -- adobe_air	Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak."	2014-01-15	10.0	CVE-2014-0492
adobe -- acrobat	Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0495.	2014-01-15	10.0	CVE-2014-0493
adobe -- acrobat	Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0493.	2014-01-15	10.0	CVE-2014-0495
adobe -- acrobat	Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.	2014-01-15	10.0	CVE-2014-0496

+++++++++++++++++++++++++++++++++++++++++++++++++
In addition to this blog, I maintain a radio show on BlogtalkRadio  and an online newsletter via paper.li.I have established Netiquette discussion groups with Linkedin and  Yahoo.  I am also a member of the International Business Etiquette and Protocol Group and Minding Manners among others. I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and I have been contributing to the blogs Everything Email and emailmonday . My work has appeared in numerous publications and I have presented to groups such as The Breakfast Club of NJ and  PSG of Mercer County, NJ.

I am the president of Tabula Rosa Systems, a “best of breed” reseller of products for communications, email, network management software, security products and professional services.  Also, I am the president of Netiquette IQ. We are currently developing an email IQ rating system, Netiquette IQ, which promotes the fundamentals outlined in my book.

Over the past twenty-five years, I have enjoyed a dynamic and successful career and have attained an extensive background in IT and electronic communications by selling and marketing within the information technology marketplace.Anyone who would like to review the book and have it posted on my blog or website, please contact me paul@netiquetteiq.com.

If you have not already done so, please view the trailer for my book below.

The United Nations now considers online privacy as an International Right

One of the premiere global topics of today is electronic privacy. This a one of the core principals of Netiquette. There has been what many believe to be significant abuse  by domestic organizations not only in the United States, but many other countries. Just as with Netiquette, rules and principals have not been adopted to or on an organized global scale. It seems that with the United Nations is moving in a very positive direction as witnessed in the document below. Online privacy is now considered an International Right! Netiquette IQ salutes this.

In the long run, it is critical for the global community to join in creating principals and accords to guaranty the integrity of responsible global communications.

United Nations A/C.3/68/L.45/Rev.1

General Assembly

Distr.: Limited

20 November 2013

Original: English

13-57677 (E) 221113

*1357677*

Sixty-eighth session

Third Committee

Agenda item 69 (b)

Promotion and protection of human rights: human rights

questions, including alternative approaches for improving

the effective enjoyment of human rights and

fundamental freedoms

Argentina, Austria, Bolivia (Plurinational State of), Brazil, Chile, Cuba,

Democratic People’s Republic of Korea, Ecuador, France, Germany, Guatemala,

Indonesia, Ireland, Liechtenstein, Luxembourg, Mexico, Nicaragua, Peru,

Slovenia, Spain, Switzerland, Timor-Leste and Uruguay: revised draft resolution

The right to privacy in the digital age

The General Assembly,

Reaffirming the purposes and principles of the Charter of the United Nations,

Reaffirming also the human rights and fundamental freedoms enshrined in the

Universal Declaration of Human Rights and relevant international human rights

treaties, including the International Covenant on Civil and Political Rights and the

International Covenant on Economic, Social and Cultural Rights,

Reaffirming further the Vienna Declaration and Programme of Action,

Noting that the rapid pace of technological development enables individuals all

over the world to use new information and communication technologies and at the

same time enhances the capacity of Governments, companies and individuals to

undertake surveillance, interception and data collection, which may violate or abuse

human rights, in particular the right to privacy, as set out in article 12 of the

Universal Declaration of Human Rights and article 17 of the International Covenant

on Civil and Political Rights, and is therefore an issue of increasing concern,

Reaffirming the human right to privacy, according to which no one shall be

subjected to arbitrary or unlawful interference with his or her privacy, family, home

or correspondence, and the right to the protection of the law against such

interferences, and recognizing that the exercise of the right to privacy is important

for the realization of the right to freedom of expression and to hold opinions without

interference, and one of the foundations of a democratic society,

A/C.3/68/L.45/Rev.1

2/3 13-57677

Stressing the importance of the full respect for the freedom to seek, receive

and impart information, including the fundamental importance of access to

information and democratic participation,

Welcoming the report of the Special Rapporteur on the promotion and

protection of the right to freedom of opinion and expression,1 submitted to the

Human Rights Council at its twenty-third session, on the implications of States’

surveillance of communications on the exercise of the human rights to privacy and

to freedom of opinion and expression,

Emphasizing that unlawful or arbitrary surveillance and/or interception of

communications, as well as unlawful or arbitrary collection of personal data, as

highly intrusive acts, violate the rights to privacy and freedom of expression and

may contradict the tenets of a democratic society,

Noting that while concerns about public security may justify the gathering and

protection of certain sensitive information, States must ensure full compliance with

their obligations under international human rights law,

Deeply concerned at the negative impact that surveillance and/or interception

of communications, including extraterritorial surveillance and/or interception of

communications, as well as the collection of personal data, in particular when

carried out on a mass scale, may have on the exercise and enjoyment of human

rights,

Reaffirming that States must ensure that any measures taken to combat

terrorism are in compliance with their obligations under international law, in

particular international human rights, refugee and humanitarian law,

1. Reaffirms the right to privacy, according to which no one shall be

subjected to arbitrary or unlawful interference with his or her privacy, family, home

or correspondence, and the right to the protection of the law against such

interference, as set out in article 12 of the Universal Declaration of Human Rights

and article 17 of the International Covenant on Civil and Political Rights;

2. Recognizes the global and open nature of the Internet and the rapid

advancement in information and communication technologies as a driving force in

accelerating progress towards development in its various forms;

3. Affirms that the same rights that people have offline must also be

protected online, including the right to privacy;

4. Calls upon all States:

(a) To respect and protect the right to privacy, including in the context of

digital communication;

(b) To take measures to put an end to violations of those rights and to create

the conditions to prevent such violations, including by ensuring that relevant

national legislation complies with their obligations under international human rights

law;

(c) To review their procedures, practices and legislation regarding the

surveillance of communications, their interception and collection of personal data,

__________________

1 A/HRC/23/40 and Corr.1.

A/C.3/68/L.45/Rev.1

13-57677 3/3

including mass surveillance, interception and collection, with a view to upholding

the right to privacy by ensuring the full and effective implementation of all their

obligations under international human rights law;

(d) To establish or maintain existing independent, effective domestic

oversight mechanisms capable of ensuring transparency, as appropriate, and

accountability for State surveillance of communications, their interception and

collection of personal data;

5. Requests the United Nations High Commissioner for Human Rights to

present a report on the protection and promotion of the right to privacy in the

context of domestic and extraterritorial surveillance and/or interception of digital

communications and collection of personal data, including on a mass scale, to the

Human Rights Council at its twenty-seventh session and to the General Assembly at

its sixty-ninth session, with views and recommendations, to be considered by

Member States;

6. Decides to examine the question at its sixty-ninth session, under the

sub-item entitled “Human rights questions, including alternative approaches for

improving the effective enjoyment of human rights and fundamental freedoms” of

the item entitled “Promotion and protection of human rights”.

================================================

You can view/purchase my new book page at www.amazon.com/author/paulbabicki
================================================

As a recent author of Netiquette IQ – A Comprehensive Guide to Improve, Enhance and Add Power to Your Email, please consider me as a contributor to your publication. I maintain an active and popular blog for email Netiquette, a radio show on BlogtalkRadio  and an online newsletter via paper.li.

Having established Netiquette discussion groups with Linkedin and  Yahoo I am also

a member of the International Business Etiquette and Protocol Group and Minding Manners among others. I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and I have been contributing to the blogs Everything Email and emailmonday . My work has appeared in numerous publications and I have presented to groups such as The Breakfast Club of NJ and  PSG of Mercer County, NJ.

I am the president of Tabula Rosa Systems, a “best of breed” reseller of products for communications, email, network management software, security products and professional services.  Also, I am the president of Netiquette IQ. We are currently developing an email IQ rating system, Netiquette IQ, which promotes the fundamentals outlined in my book.

Over the past twenty-five years, I have enjoyed a dynamic and successful career and have attained an extensive background in IT and electronic communications by selling and marketing within the information technology marketplace.Anyone who would like to review the book and have it posted on my blog or website, please contact me paul@netiquetteiq.com