New Leak Can Crash 115,000 Minecraft Servers

A security researcher has published found vulnerability in Minecraft after nearly two years in 2013, allowing an attacker can certainly crash 115,000 Minecraft servers. Ammar Askar warned on July 28, 2013 Minecraft developer Mojang for a vulnerability in the popular game, more globally than 100 million registered players.

By sending to make a simple package, it was possible to let Minecraft-servers crash. As proof Askar also developed an exploit. Despite repeated attempts to contact an update remained, making the researcher, now almost two years later, has revealed the leak. The original vulnerability was discovered in version 1.6.2. Meanwhile 1.8.3 the latest version and this version is also vulnerable.
Servers

Research by the Shodan search engine that took place in late March this year, shows that worldwide certainly 115,000 Minecraft servers are online. Blog Posting of Askar in which he revealed the vulnerability also provided the necessary attention and brought him back into contact with developer Mojang. The company said work on an update. A previous solution would not have solved the problem, but Askar think Mojang had no solution developed, as he had sent an exploit to test his bug message.

Yet in retrospect, he suggests that he probably should have given the company a final warning before he revealed the vulnerability. "A combination of miscommunication and lack of testing led to this situation. Hopefully it's a good learning experience," says the researcher.

Vulnerabiltiy: Google Reveals Adobe Reader Leak for Mac OS X

Google has unveiled a vulnerability in Adobe Reader in the Windows version of the PDF reader would be patched, but the Mac version is still present. The vulnerability was reported to Adobe in October last year.In December there was an update for the Windows version appeared, but Adobe had to Google that it had failed to deliver a solution for the Mac version.

This week, however, went the deadline had asked Google. "Project Zero Team" of the search giant is looking specifically for vulnerabilities in commonly used software. Once a leak is found will the supplier 90 days to come up with an update, other details are the vulnerability automatically made ​​public. Adobe was warned by Google that it would reveal the details.

Via the leak, it is possible to let the application crash, which is possible up to a "heap-based buffer overflow" can cause.Noteworthy is the way that Adobe to Google said to have patched the flaw in the Windows version. The leak in question, known as CVE-2014-9160, however, does not appear in the list of Adobe Reader update.