Archive for March, 2007|Monthly archive page

Windows Vista Suicide, Courtesy of McAfee

Windows Vista, Microsoft’s extensively applauded most secure Windows platform to date can be taken down by nothing more than a mere animated cursor. I have seen this piece of news spreading,
following a security advisory posted by the Microsoft Security Response Center. But what is the real deal behind this information?

Microsoft has warned that it is aware of limited and targeted attacks impacting a critical vulnerability in Microsoft Windows Animated cursor handling. At the basis of the zero-day vulnerability is insufficient format validation, before cursors, animated cursors, and icon rendering. Security company Symantec informed that in the eventuality of a successful exploit, the attacker will be able to perform remote arbitrary code execution on the victim’s machine. There are two vectors for this kind of attack, one is the Internet browser and the other is the desktop email client.

Read the full article @ SoftPedia

Next Page »