Attackers exploit latest MS flaws - Club CDFreaks

*JayC30* · 16-06-2006

Quote:

Hackers have crafted several exploits for security vulnerabilities that Microsoft patched last Tuesday.

The availability of exploits promoted McAfee to raise its Global Threat Condition to 'severe', the third highest rating on a four-step scale.

The SANS Internet Storm Centre, however, maintained its lowest rating of 'Green' and Symantec is warning of an 'elevated' security risk level, the second step on an four-step scale.

Proof-of-concept code has emerged that exploits a flaw in the way that Windows handles images in the ART format.

Exploits have surfaced that target flaws in Windows Media Player and Word as well as the Windows Routing and Remote Access Service, the Server Message Block feature and a flaw in Windows' TCP/IP Protocol driver, according to the SANS Internet Strom Centre.

The latter two are rated 'important', and Microsoft has issued a severity rating of 'critical' for the other three vulnerabilities.

Attackers had been exploiting the Microsoft Word vulnerability prior to the patch release to stage highly targeted attacks.

A disgruntled programmer published proof-of-concept code for the Routing and Remote Access Service vulnerability after Microsoft failed to acknowledge him in a security advisory.

The software vendor has since edited the bulletin to correctly reflect the programmer's contribution.

Security experts at iDefense crafted both the Windows Media Player and ART image file format exploits. The company had also filed the original bug reports with Microsoft.

Although iDefense has had ample time to create the proof-of-concept code, it demonstrates that malicious attackers would be able to craft a similar exploit.

Hackers in recent months have increased the speed at which they create exploits for recently patched security flaws. This allows them to target systems whose users have not yet installed the latest updates.

Source

Lordy will MS ever make something secure? Though saying that given it's prominance it's open for attack, before anyone says linux, there are a couple of proof-of-concepts, but as it is a niche area nobody so far has been bothered to attack it.

LastStand · 16-06-2006

Damn that was quick, they are getting better every year at finding bugs in MS code.

*debro* · 23-06-2006

I'm sure linux has lots of bugs too

With the OS being open source ... I'm sure theres a few weeds in the garden

16-06-2006	#2 (permalink)
LastStand CD Freaks Member Join Date: Jul 2004 Location: Belfast Posts: 249	Re: Attackers exploit latest MS flaws Damn that was quick, they are getting better every year at finding bugs in MS code. __________________ Ten Most Harmful Books of the 19th and 20th Centuries 1. The Communist Manifesto 2. Mein Kampf (My Struggle) 3. Quotations from Chairman Mao 4. The Kinsey Report 5. Democracy and Education 6. Das Kapital 7. The Feminine Mystique 8. The Course of Positive Philosophy 9. Beyond Good and Evil (The Nazis loved Nietzsche) 10. General Theory of Employment, Interest and Money

23-06-2006	#3 (permalink)
debro Blown to smitherines Join Date: Jul 1999 Location: The c@ke mixer Posts: 10,352	Re: Attackers exploit latest MS flaws I'm sure linux has lots of bugs too With the OS being open source ... I'm sure theres a few weeds in the garden __________________ SAVE THE EARTH! It's the only planet with chocolate! CDFreaks - Educating the Masses since 2005! Click Here to join the educated & privileged! Viva La Resistance! Admitting that you've illegally downloaded movies/songs and need help to process/burn is comparable to robbing a bank, and walking into the bank the next day holding the bags of money to deposit them into your account. Don't be surprised if people laugh at you when you make the headlines.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
5055GDL flaws	tpbeta	Lite-On DVD Recorder and Player Forum	3	15-02-2007 01:45
Latest MS patches	Quema34	Latest News Headlines	0	15-06-2006 01:32
Hackers work to exploit latest Firefox flaw	pollushon	Latest News Headlines	0	14-09-2005 04:43
flaws in brand new cds	itp	Newbie Forum	6	28-03-2004 18:43
removing flaws and crackles	floyd	Burning Software	2	02-05-2002 15:41

Today
CD Freaks	__________________ This advertising will not be shown to registered members. Register your free account today and become a member on Club CD Freaks - Knowledge is Power

Commercial ads