Wednesday, January 04, 2006

Another MS Security Flaw

A good way to start the new year, another security flaw has been discovered in most versions of Microsoft Windows, from Win 98 to the most recent Windows XP.

Oddly enough, it's not Microsoft that have released a patch, but a third party. Brian Krebs, PC Security expert on WashingtonPost.com posted the following...

"It appears we will be ringing in the new year with a new and improved exploit that online miscreants can use to attack an unpatched Microsoft Windows flaw and install spyware, viruses and other dangerous digital intruders.

The latest bit of malware takes advantage of the same Windows Metafile (files ending in .wmf) security hole that Security Fix
warned about earlier this week, the one where Windows users can get infected just by clicking on a specially crafted link in an e-mail or visiting a Web site that hosts the malicious code. "

There have been reports of a new IM worm making use of this WMF exploit, which you can read about here...

"We will see this vulnerability being used for various different purposes for months to come, and I wouldn't be surprised to see a massive worm outbreak before Microsoft releases this patch," said Mikko H. Hypponen, chief research officer at F-Secure. - You can download the patch here...

No comments: