Tuesday, January 3, 2006

Windows WMF Flaw Spawns Dozens of Attacks

TECHNOLOGY/INTERNET

UPDATED NEWSBYTES
Windows flaw spawns dozens of attacks
A flaw in Microsoft's Windows Meta File has spawned dozens of attacks since its discovery last week, security experts warned Tuesday.
(CNET) The attacks so far have been wide-ranging, the experts said, citing everything from an MSN Messenger worm to spam that attempts to lure people to click on malicious Web sites.

The vulnerability can be easily exploited in Windows XP with Service Pack 1 and 2, as well as Windows Server 2003, security experts said. Older versions of the operating system, including Windows 2000, [Windows 98 SE] and Windows ME, are also at risk, though in those cases the flaw is more difficult to exploit, said Mikko Hypponen, chief research officer at F-Secure. Read full story.

Microsoft Security Advisory (912840)
Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution.(Microsoft TechNet) On Tuesday, December 27, 2005, Microsoft became aware of public reports of malicious attacks on some customers involving a previously unknown security vulnerability in the Windows Meta File (WMF) code area in the Windows platform.

RELATED
Windows PCs Face Huge Virus Threat

US-CERT: United States Computer Emergency Readiness Team
The United States Computer Emergency Readiness Team (US-CERT) is a partnership between the Department of Homeland Security and the public and private sectors. Established in 2003 to protect the nation's Internet infrastructure, US-CERT coordinates defense against and responses to cyber attacks across the nation.

Information is available from the US-CERT web site, mailing lists, and RSS channels.

US-CERT also provides a way for citizens, businesses, and other institutions to communicate and coordinate directly with the United States government about cyber security.

TENSION: Something to be aware of
GRAVITY: Huge flaw at base level

Tags: , , , , ,
Global Tags: , , , , , ,
AddThis Social Bookmark Button

0 Comments:

Post a Comment

<< Home