Sunday, February 26, 2017
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
MWC: HP Announces The Pro x2 612 G2 Commercial Detachable
HMD Brings Nokia's Classic 3310 Phone Back
MWC: Samsung Launches The Galaxy Tab S3, Galaxy Book, And New Gear VR With Controller
New Budget-friendly Moto G5 and G5 Plus Come With Metal Designs
DJI Introduces M200 Series Drones For Enterprise Solutions
MWC: ZTE Unveils The'Gigabit' Proof-of-concept Smartphone
MWC: Huawei Launches New HUAWEI P10 and P10+ Smartphones, Watch 2 Smartwatches
Samsung to Showcase Galaxy Tab S3 and Galaxy Book 2 Tablets, A New Gear VR at MWC
Active Discussions
Which of these DVD media are the best, most durable?
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
Help make DVDInfoPro better with dvdinfomantis!!!
menu making
Optiarc AD-7260S review
cdrw trouble
 Home > News > General Computing > Importa...
Last 7 Days News : SU MO TU WE TH FR SA All News

Thursday, July 15, 2004
Important Windows flaw could turn critical


Security experts are bracing themselves for a spate of new worms and viruses designed to exploit of the seven new vulnerabilities announced by Microsoft on Tuesday as part of its monthly patch cycle.

Of the new vulnerabilities, Windows Shell (MS04-024)--has been picked out by security experts as a potential target for future worms and viruses.

Ben Nagy, senior security engineer at security researcher firm eEye, said he expects the Windows Shell bug to be the most serious threat--despite Microsoft rating the problem as 'important' rather than 'critical'.

According to Microsoft, if a user is vulnerable to MS04-024 and has administrator privileges, an attacker could "take complete control of the affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges."

However, the flaw is not rated as critical because it would require "significant user interaction" to work. This means that a user would need to open an e-mail attachment, or download a file from a malicious Web site.

Richard Starnes, president of security industry group ISSA UK, said that malware writers usually reverse-engineer Microsoft's patches in order to produce exploits. Based on his on experience of previous threats, he expects the first batch of new exploit codes to be available as early as next week. These would probably be used to create a worm delivered as an email attachment.

"Given the trend, it will probably take between five and seven days for exploits to start appearing--depending on their complexity. Because it has to be locally executed, it is likely to be another LoveBug scenario," Starnes said.

EEye's Nagy agrees that to exploit the vulnerability, a virus will most likely be distributed as an e-mail attachment, but the vulnerability could also be 'blended' with another attack.

"I don't think either vulnerability could create a Sasser or MSBlast type-worm, but we are seeing many blended threats, so it could be used in combination with other exploits," said Nagy.

From ZDNet



Previous
Next
Kingston Launches New Ultra Low-Latency DDR PC3200 Memory Kits For PC Enthusiasts        All News        Windows Security Updates for July 2004
TV laptop from Toshiba     General Computing News      Windows Security Updates for July 2004

Source Link Get RSS feed Easy Print E-Mail this Message

Related News
Microsoft's Outlook.com Premium Emal Service Now Available
Microsoft To Give A Face Lifting To Windows 10 With 'Project NEON'
Microsoft Edge Will Soon Get New Features
Cloud Services Boost Microsoft's Sales And Profit
Microsoft Announces Intune for Education And New Windows 10 PCs for School
Microsoft, NXP Semiconductors, IAV and Auto Mobility Partners showcase Technologies For Safe And Personalized Automated Friving at CES 2017
Microsoft Partners with TomTom Mapping Company On Azure
European Commission Approves Acquisition of LinkedIn by Microsoft, Subject to Conditions
Microsoft Is Careful With New Chatbot Zo, Now Available For Testing
Microsoft Offers Grants to Organizations Working to Improve Affordable Internet Access
Microsoft Wants To Bring Something Different in The Smartphone Market
Microsoft's Solitaire Game Now Available On iOS And Android

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2017 - All rights reserved -
Privacy policy - Contact Us .