Legit News
Exploits released for new Windows flaws
A Chinese security group has released sample code to exploit two new unpatched flaws in Microsoft Windows.
The advisory comes in the week before Christmas, a time when many companies and home users are least prepared to deal with the problems. Security firm Symantec warned its clients of the vulnerabilities on Thursday, after the Chinese company that found the flaws published them to the Internet.
One vulnerability, in the operating system's LoadImage function, could enable an attacker to compromise a victim's PC when the computer displays a specially crafted image placed on a Web site or in an e-mail. The other vulnerability, in the Windows Help program, likewise could affect any program that opens a Help file.
Because the flaws are in a library used by Windows programs, almost all browsers and e-mail clients are likely affected by the flaws, said Alfred Huger, senior director of engineering at Symantec.
"They are rather serious," Huger said. "Both can be exploited by anything that processes images or reads help files."
Posted by | Fri, Dec 24, 2004 - 07:30 AM
Search
Hot Topics
- ThinkGeek Unveils iCADE 8-Bitty at Toy Fair 2012
- OCZ Vertex Plus 120GB SATA II SSD For $90 Shipped AR
- ASRock Extreme 9 Motherboard Review
- GPU-Z v0.5.9 Released
- February 13, 2012 News from Around the Web
- mobile i7 security
- Sandy Bridge Overclocking Question(s)
- Intel settles New York antitrust case for $6.5 Million
- PowerColor HD7970 w/ Dual Fan Cooler Announced
- AMD Radeon HD 7950 3GB CrossFire Review
Socialize