Home Phone and Internet $60/mo
December 28, 2005 4:04 PM PST
Trojan delivers unwanted gift to Windows PCs
- Related Stories
-
More exploits out for Windows flaws
December 1, 2005 -
Trojan horse rides on unpatched IE flaw
November 30, 2005 -
Code exploits Windows flaw in image file handling
November 29, 2005
The Trojan, dubbed Exploit-WMF (Windows Meta File), was rated a category 2 level risk, meaning it had the potential to continue to spread, said Dave Cole, director of security response at Symantec.
The exploit "is misusing a function in the WMF library in Windows," dropping onto the machine a downloader Trojan "that pulls down its big brother, a more sophisticated Trojan" from a server on the Internet, he said.
"Then it might try to pull down adware, spyware or a bot program," that can turn the computer into a zombie to be used for attacking other machines or sending spam, or just leave a hole on the computer through which sensitive data could be stolen, Cole said.
Kaspersky Lab rated the vulnerability "highly critical" and predicted that "new modifications of these programs may well appear in the near future."
The WMF vulnerability affects computers running Windows XP with Service Pack 1 and Service Pack 2, as well as Windows Server 2003 with Service Pack 0 and Service Pack 1. It can be exploited when an Internet Explorer user, or Firefox user under certain circumstances, visits a Web site that has malicious code on it or when a user previews .wmf format files with Windows Explorer, Kaspersky said in a statement.
The WMF library allows the computer to handle particular image types of Windows machines, Cole said. There is no patch for it yet from Microsoft, although antivirus vendors had released software to help protect against it, he said.
"Microsoft is investigating new public reports of a possible vulnerability in Windows and will continue to investigate the reports to help provide additional guidance for customers," a Microsoft spokesperson wrote in an e-mail. "Upon completion of this investigation, Microsoft will take the appropriate action to protect customers, which may include providing a fix through the monthly release process or issuing a security advisory, depending on customer needs."
Windows users can get more information about security issues at http://support.microsoft.com/security.
See more CNET content tagged:
Microsoft Windows Metafile,
trojan horse,
service pack,
Kaspersky Lab,
adware
Scoble is tracking MS response to it on his blog:
http://scobleizer.wordpress.com/
Ever heard of a OSX exploit?
websites and always seems to hear these experts say they
personally use a MAC and have bought one for their family
members too after seeing so many scary vulnerabilities in Windows
and Internet Explorer!
The Macintosh IS the condom of the internet!!
- Microsoft CAN NOT be allowed to profit from this...
-
by SmartITGUY
January 4, 2006 8:26 AM PST
- You KNOW, Microsoft will use this flaw to leverage users into buying new software. They will ONLY patch Windows XP, and anyone using Windows 2000 or older, who wants their systems fixed or made more secure will be FORCED to buy WIndows XP.
-
Reply to this comment
-
-
See all 90 Comments >>In alot of cases this will force people to have to buy new hardware.
So far Microsoft has seen surges in sales of Windows XP for every flaw and exploit that has come out. THIS IS VERY WRONG! Microsoft should not be rewarded for poor programming. What's to stop them from deliberately creating flaws and vulnerabilities to increase sales.
The LAW needs to step in and FORCE Microsoft to patch "EVERY" version of Windows that is affected by this flaw... AT NO COST TO THE USER.