New Windows Critical Flaw –and being exploited!
It”s almost getting to be old news.
We have another critical Windows flaw, this one with the Windows graphics format called Windows Metafile Format. As usual, this involves a buffer overflow in the Windows code that handles the graphics file — and can give a remote user the ability to execute code of this choice on the victim”s computer.
What does it take to be a victim? Just visit a malicious web site that wants to show you a specially-crafted picture file — or get it in as an attachment to an email - or even embedded in an email.
All you have to do is try to open the image/picture file - and the file will execute the attacker”s code. Most of the exploits so far are reported to be loading adware and spyware, or downloading “downloaders” that can later download anything. Viruses aren”t far behind.
So far, Microsoft has not announced or released any patch for the problem. But, some of the anti-virus companies are reacting. I guess Microsoft will get around to patching it on the second Tuesday of next month.
Until then, be careful — don”t open any attachments and turn off “display graphics” in your email programs. If you use Google Desktop — TURN IT OFF. Reportedly, Google Desktop”s attempt to index the image file will also trigger the malicious code.

Posted December 31, 2005
Comments(0)