Security
Microsoft issues patch for cursor flaw
Are there any workarounds to stop the most recent Windows animated-cursor exploit? Do you know when Microsoft will release a patch to repair the problem?
Microsoft released a patch last week to fix the animated-cursor vulnerability. This problem with the way animated cursors are handled in Internet Explorer on Windows requires only that one visit a malicious Web page designed to exploit the problem. No clicking is needed. This makes exploitation through HTML e-mail spam particularly easy and troublesome. Microsoft's advisory for this vulnerability, No. 935423, recommends setting Outlook and/or Outlook Express to display e-mail as plain-text only. Other workaround recommendations include using an alternate Web browser such as Firefox. Internet Explorer 7 on Microsoft Vista is reported to be unaffected by this vulnerability. Vista runs the browser in a protected mode unavailable in XP and earlier versions that keeps things like this animated-cursor exploit isolated from the core of the operating system. Large numbers of reported attacks based on this vulnerability are tied back to a small number of domains, and those who find themselves compromised are asked to report the incidents to the FBI through the Internet Crime Complaint Center, www.ic3.gov. This vulnerability is one you should take care of as soon as possible. Check Microsoft.com for the latest information on patch availability and keep a close eye on your systems-security monitoring tools.
| Use this form to start a public discussion with other Linux World users on this article. Log In | Register for an account (Why you should) |
Note: Register to have your user name appear; otherwise your comment will show up as "Anonymous."
*Anonymous comments will only appear once they are approved by the moderator.
• Dell puts Linux and Atom in Vostro PCs
• Mozilla names best Firefox 3 add-ons
• Torvalds: Fed up with the 'security circus'
• Dell Latitude ON - big win for Linux
• Open source advocates hail appeals court ruling
LinuxWorld Conference and Expo San Francisco, August 4-7, 2008.
Linux Plumbers Conference Portland, OR, Sept. 16-19, 2008.
FreedomHEC Santa Monica, November 8-9, 2008.