Two New Windows Flaws Revealed in Time for Christmas   12/23/2004 - 1,232 views, 1 Comment

Summary: Two new wide-spread and far-reaching security flaws have been identified in Windows. And not content to just identify the flaws, the Chinese "security" (and Aunty uses the term advisedly) firm, VenusTech, has also posted the code necessary to exploit the flaws. ...

Previous Article « Yahoo Refuses Family Access to Slain Son’s Email
Read Next Article » Software to Spam the Spammers

Two new wide-spread and far-reaching security flaws have been identified in Windows. And not content to just identify the flaws, the Chinese “security” (and Aunty uses the term advisedly) firm, VenusTech, has also posted the code necessary to exploit the flaws. That story was picked up and posted by the Chinese security forum, Xfocus Team.

Gee, guys, thanks.

According to CNet news, one of the vulnarabilities, the Window’s “LoadImage” function, “could enable an attacker to compromise a victim’s PC when the computer displays a specially crafted image placed on a Web site or in an e-mail”. Whee!

The other exploitable flaw is in, of all things, the Windows Help program (ironic, eh ?), and can affect any program which calls up Help.

No comment from Microsoft was available at the time of the story breaking, and of course most of corporate America is on skeleton crew because of the holidays.

Merry Christmas.

Previous Article « Yahoo Refuses Family Access to Slain Son’s Email
Read Next Article » Software to Spam the Spammers

Get a FREE summary of the week's articles every Friday!
(You can stop it any time!)
    *We never share your email address with anyone

Email Address:
Date of first visit:
How you found us:

Be sure to watch for the confirmation email!

Subscribe
to The Internet Patrol on your cell phone    Email the link for this page to a friend!

Read more:

»  Internet Explorer 6 Security Flaw Given “Extremely Critical” Status

»  No Wait, These Ã…re the Last Two Windows Holes of the Year

»  Windows Help Vulnerability Target of Newly Released Trojan

»  Microsoft Windows Security Updates for October - 3 Critical!

For additional similar stories check out our archives on Security, Windows

 

1 Comment »

  1. Two New Windows Flaws Revealed in Time for Christmas
    Two new wide-spread and far-reaching security flaws have been identified in Windows. And not content to just identify the flaws, the Chinese ?security? (and Aunty uses the term advisedly) firm, VenusTech, has also posted the code necessary to exploit t…

    Trackback by Lockergnome's Windows Fanatics — 12/23/2004 @ 10:35 pm

RSS feed for comments on this post. TrackBack URI

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
The Internet Patrol
Patrolling the Internet for You!