|
« Putin backs Russia's Yukos grab |
Main
| RLX Technologies drops blade servers for software »
December 24, 2004
New major Microsoft OS exploits
Chinese security company, Xfocus Team, has published on the internet information on two new serious exploits within Microsoft Windows, along with "exploit code" that allows malicious coders to immediately start taking advantage of the exploits.
These appear to be pretty serious exploits, too - according to Exploits released for new Windows flaws:
One vulnerability, in the operating system's LoadImage function, could enable an attacker to compromise a victim's PC when the computer displays a specially crafted image placed on a Web site or in an e-mail. The other vulnerability, in the Windows Help program, likewise could affect any program that opens a Help file.
Because the flaws are in a library used by Windows programs, almost all browsers and e-mail clients are likely affected by the flaws, said Alfred Huger, senior director of engineering at Symantec.
"They are rather serious," Huger said. "Both can be exploited by anything that processes images or reads help files."
Posted by at December 24, 2004 02:35 PM
> Discuss this in the Platinax Business forums
|
