No Wait, These Ã…re the Last Two Windows Holes of the Year   12/24/2004 - 1,173 views, 1 Comment

Summary: Aunty had no idea that there was such a distinction to finding the last Windows security hole of the year! But that is the only thing which can explain this last minute rush to post newly discovered flaws in the eleventh hour ...

Previous Article « Put Your Spouse..Kids…Cat..Anyone!..in an iPod Ad
Read Next Article » Trend Micro Offers Free Virus and Spam Checker for Cell Phones


Aunty had no idea that there was such a distinction to finding the last Windows security hole of the year! But that is the only thing which can explain this last minute rush to post newly discovered flaws in the eleventh hour of the holiday season.

Barely ten hours ago, Aunty told you about two flaws which were discovered by a Chinese security firm, and then posted about online along with the code for taking advantage of the flaws (for which Aunty thanked them profusely.)

Well, it could have been worse, because as it turns out they actually discovered a total of four new security holes, but only posted the exploitation instructions for two of them. I repeat: gee, guys, thanks.

These two additional security flaws both have to do with the Windows ANI kernal. ANI stands for Windows ANImated Cursor, and it manages certain types of image frames such as may be present in an email.

The first issue can cause Windows to crash if exploited successfully and the second can cause the system to freeze. Both are related to faulty checking of certain aspects of the ANI header file.

There has as of this writing been no update from Microsoft, but stay tuned, and Aunty will let you know as soon as one is announced.

Previous Article « Put Your Spouse..Kids…Cat..Anyone!..in an iPod Ad
Read Next Article » Trend Micro Offers Free Virus and Spam Checker for Cell Phones

Get a FREE summary of the week's articles every Friday!
(You can stop it any time!)
    *We never share your email address with anyone

Email Address:
Date of first visit:
How you found us:

Be sure to watch for the confirmation email!

Subscribe to The Internet Patrol on your cell phone    Email the link for this page to a friend!

Read more:

»  Windows XP and 2000 Users Beware - New “High Risk” Flaws in Outlook and Internet Explorer

»  Unix Security Holes! 44 of ‘em!

»  Even Unpatched, Linux Most Secure OS

»  Dear Internet Patrol: Love/Hate Relationship with WinXP SP1

For additional similar stories check out our archives on Security, Windows

 

1 Comment »

  1. No Wait, These ?re the Last Two Windows Holes of the Year
    Aunty had no idea that there was such a distinction to finding the last Windows security hole of the year! But that is the only thing which can explain this last minute rush to post newly discovered flaws in the…

    Trackback by Lockergnome's Windows Fanatics — 12/24/2004 @ 8:06 am

RSS feed for comments on this post. TrackBack URI

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
The Internet Patrol
Patrolling the Internet for You!