Windows Tune-Up Send an Email and schedule an appointment Windows Tune-Up
May 5th, 2008 last updated.
Windows Tune-Up Send an Email and schedule an appointment Windows Tune-Up May 5th, 2008 last updated. |
Microsoft issues patch for WMF vulnerability
Related resources
Microsoft releases security bulletin early to patch critical IE flaw
Microsoft's first security bulletin of the year was so critical that Redmond released it early. DetailsThe first security bulletin of 2006 is so critical that Microsoft released it on January 5—a week before the usual patch cycle. Microsoft Security Bulletin MS06-001, "Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution," addresses a vulnerability that's so serious it even made the front page of some business newspapers, including the Financial Times. This might be the only security bulletin this month; the Microsoft Security Bulletin Summaries and Webcasts page lists the bulletin as from both January 5 and 11. However, Microsoft purportedly plans to release two additional security updates—one for Windows and one for Microsoft Office and Exchange Server. This is a remote code execution threat due to a Graphics Rendering Engine vulnerability (CVE-2005-4560). The problem is due to a fault in the way the graphics engine handles Windows Metafile (WMF) images. Microsoft Security Advisory 912840 addressed this vulnerability in late December because active exploitation was already under way. Microsoft Baseline Security Analyzer (MBSA) versions 1.2.1 and 2.0, as well as Systems Management Server, will determine if the update is necessary for particular systems. For more details about WMF and other image file formats, see Microsoft Knowledge Base Article 320314. ApplicabilityAll Microsoft operating systems from Windows 98 on are vulnerable, including Windows XP Service Pack 2 and Windows Server 2003 SP1. However, because this isn't a critical threat Windows 98, Windows SE, or Windows ME, the update doesn't support these versions. (Microsoft has ended support for these OS versions except for critical issues.) Risk level - criticalMicrosoft has rated this vulnerability as critical for Windows 2000, all versions of Windows XP (including SP2), and all versions of Windows Server 2003 (including SP1). This rating also applies to x64 and Itanium-based systems. Mitigating factorsA successful attack would only give the attacker the same rights as the local user. In addition, an image hosted on a malicious Web site initiates the attack, so the user must actively visit a malicious Web site, either by clicking an e-mail or instant messaging link. However, it's important to note that a user can also initiate an attack by opening a Word document that contains an embedded malicious image.
News: The Chaotic World of Defining Spyware SECURITY WATCH: A Dangerous Mobile Phone Virus Calls In 
The threats keep coming for Nokia phones. McAfee users need to be alert, too. Virus Alert: Worms set Trojan horse trap For details see Worms on the prowl, traveling via MSN Messenger.
Ready or Not, Here SP2 Comes
Virus Alert: Sober.j launches attack Virus brief
Get additional resources on viruses
Security downloads, books, and CDs
Viruses exploit Microsoft patch cycle Related resources
Virus Alert: Copycat Netsky variant linked to South Korea
Virus brief:
Top twenty virus list for September The Virus Threat Center highlights Kaspersky Labs' list of the top twenty viruses for the month of September. Find out which viruses--and their variants--are high on the list.
News: New Worm Attacks MSN Messenger As Service Falters Get the details here.
News: Windows JPEG Exploit On the Prowl Are more sinister exploits on the way? News: Microsoft Graphics Bug Threatens Systems Get the details here.
News: Attack Pierces Fully Patched XP Machines Get the details on this attack and how you can avoid it. News: First SP2 Exploit? Analysis: New MyDoom Piggybacks a Nastier Worm
News: Teen Pleads Guilty in Blaster Worm Attack Find out what charges he may be facing. SECURITY ALERT: MyDoom.m prevention and cure Virus brief The latest version of the MyDoom virus uses social trickery to get users to infect themselves. MyDoom.m (w32.mydoom.m@mm, also known as MyDoom.l (Norman), MyDoom.n (Computer Associates), and MyDoom.o (Sophos), is packed with UPX, is approximately 28KB in size, and is a mass-mailing worm that uses its own SMTP engine to send out copies of itself to addresses harvested from the infected PC. It also spoofs the return address, making it hard to trace infected machines. MyDoom.m does not affect Linux, Mac, or UNIX systems. Because MyDoom.m spreads via e-mail, opens a remote access backdoor on infected PCs, and could damage system files, this worm rates a 6 on the CNET/ZDNet Virus Meter. Read the full report on MyDoom.m for details. Have you been affected (or infected) by MyDoom? Sound off in this related article discussion. More on MyDoom
News: New Bagle Variant is 'Worst of the Year' The tenacious Bagle virus is at it again, and security experts report that this is the worst version yet. Get the details on this new virus in case it appears in your inbox. First known 64-bit virus threat found TODAY'S TOP STORY
Microsoft patches new Windows flaw TODAY'S TOP STORY Sasser keeps squirming into homes, businesses
TODAY'S TOP STORY Related resources
Sasser variants pose greater danger TODAY'S TOP STORY Sasser.a and Sasser.b Worm Alert! Sasser and its variations are network-aware worms that do not require e-mail or user interaction to spread. Sasser takes advantage of a buffer-overrun flaw in the Local Security Authority Subsystem (LSASS), which allows an attacker to gain control of infected systems. Microsoft patched the flow with MS04-011on April 13. The worms use a bootstrap effect to infect new machines first then download the full code from a previously infected machine later. Sasser (w32.sasser.a) and Sasser.b (w32.sasser.b) are both 15,872 bytes in length and randomly scans local networks and the Internet to look for additional systems to infect. This scanning could slow normal traffic on the Internet. Vulnerable systems include Windows 2000, Windows XP, and Windows Server 2003 that have not installed the Microsoft Security Bulletin patch MS04-011, and are not running desktop firewall software. Sasser does not affect any other version of Windows, nor Linux, Unix, Mac OS, or any other operating system. Microsoft has created a special page on how to prevent a Sasser infection. Basically, a desktop firewall should protect vulnerable systems until the Microsoft security patch can be downloaded. If you do not have a personal firewall, you should install one first to limit the affects of the Sasser worm. The Microsoft security patch MS04-011 is available here.
Worm worries grow with release of Windows hacks TODAY'S TOP STORY
New Worm Eschews AttachmentsAs the Bagle worm turns, it keeps evolving into something deadlier and deadlier. The newest version eschews attachments, using Explorer's Object Tag vulnerability to infect users running an un-patched version of IE instead. That's right, you can get infected just by reading an e-mail! What fresh torture is this -- and how can you protect yourself? Our story tries to shed some new light on the situation.
New worm disguised as Microsoft update TODAY'S TOP STORY
VIRUS ALERT: Netsky, Bagle.B, and Mydoom.F pose triple threat to networks Virus brief The Netsky.d virus, discovered Monday, continues to roll through computer systems around the world, generating millions of infected e-mails and shutting down mail systems and servers. Netsky joins Bagle.B and Mydoom.F to create a trio of problems for Network Administrators. The latest worm, Netsky.d is a variant of Netsky.c, which was discovered in late February. Netsky uses its own SMTP engine to send itself to the e-mail addresses it finds when scanning mapped drives and hard drives. The Netsky.d variant is particularly difficult to root out because it uses a number of different subject lines and contains an attached PIF (Program Information File). TechRepublic's John McCormick takes a look how the three viruses continue to pose a significant threat to network security. Read the full report for details.
Today: AIM worm spreading, Windows Flaw Discovered, Domain Squatting for Dummies Nasty Flaw Exposes Millions of Windows Desktops to HarmHere we go again! If you use Windows XP, 2000, or NT, you're at risk once again—from crackers exploiting a hole to run nastyware on your computer. Although the hole has yet to be taken advantage of, it's probably only
a matter of time. So get patching! We've got facts on the scope of the problem and how to fix it. This one's pretty serious. AOL Instant Messaging Worm Wreaks HavocAIM users were startled Thursday morning by a message exhorting them not to open messages about an "Osama bin Laden" game. The messages—a form of viral adware—come from a slimy company called Buddylinks.
Our feature tells you how to spot (and avoid) it. More Doomjuice Attacks Due FridayNew variants of the Doomjuice worm, which takes advantage of MyDoom-infected computers, are scheduled to unleash bitter attacks against Microsoft's Web site on Friday. It appears that MyDoom-infected PCs are being used for other nefarious purposes as well. Details on what these nasty worms do, and how widespread the infection might be, can be found in our story. Windows Trademark at RiskImagine a world where Microsoft doesn't own the term "Windows." We could have products named Sun Windows, Open Windows, Java Windows, Linux Windows, and Apple Windows—all competing with Microsoft's OS. Well, that
world is a lot close today. Find out why a court ruling for Lindows has put the whole Windows stranglehold at risk. Doom times two TODAY'S TOP STORY
New virus clogs the Net TODAY'S TOP STORY Related resources
New virus infects PCs, whacks SCO TODAY'S TOP STORY Related resources
New worm spreads over holiday weekend TODAY'S TOP STORY
New Virus Disguised to Do DamageThere's a nasty new Trojan horse-style worm in town--and it's cunningly wrapped in sheep's clothing. Known as either Xombe or Downloader, it comes cloaked as an e-mail from Microsoft, containing security patches that
must be applied immediately. Instead of securing your system, however, it ends up installing another file—a Trojan horse. We've got details on
what the e-mail looks like and how to avoid it. Once AV researchers have figured out to nullify it, we'll have a fix posted as well.
AS of December 12th 2003 IE bug lets fake sites look real
Flaw could unleash another Slammer Related resources
Worm hits Windows-based ATMs Related resources
Virus PC Alerts AS of October 2003 Son of MSBlast on the way? Related resources
|
Please type " Lompoc Direct " in subject line. email me: TomSutor@hotmail.com Please type " Lompoc Direct " in subject line. Business Phone "Use First" 805-735-3532 Business Phone "Use Second" 805-455-4125 Telephone will be responded to within the day, Please Leave contact Phone Number. Please type " Lompoc Direct" in subject line. e-mails will be responded to within 24 hours. Lompoc Direct P O Box 2343 Lompoc CA 93438 |
