Microsoft’s Security Research team has posted information About two vulnerabilities, one in Picasa photo sharing application that make allow to execute codes and one on Facebook.com that could lead to account compromise.
The problem in picasa, which affects picasa for windows version 3.6 build 105.61 and earlier versions. it exist the way that picasa handles a type of special crafted JPEG images. a hacker exploit this valunarbility to allow picasa to it have and exicute Vulnerabilitie codes. an attacker who successfully exploited this security hole colud get the same user options the logged-on user. if the user logged with adminstrator account an attacker who successfully exploited this vulnerability it take complete controll of an injected system. and it allow the attacker to install programs, change or delete data, or create accounts with administrative user limits.
In facebook a issue had in the way that facebook.com priviously implimeneted protection against clickjacking attacks. a hacker to run this vulnerability to change Facebook privacy setting and expose sensitive user information. and an attacker who make this vulnerability colud take complete controll of user's facebook.com account and perform any actions like a normal user.
