Microsoft Warns on New Windows Zero-Day Vunerability

by Hilbert Hagedoorn on: 01/31/2011 12:53 PM | source: | 0 comment(s)

Microsoft released a security advisory on Friday warning users to watch out for a newly disclosed vulnerability in all versions of Windows, one that takes advantage of a common method of transferring media types in email messages. The hole, called the MHTML protocol handler, is located in a part of all supported versions of Windows, including XP Service Pack 3.

By luring a user to visit a malicious site and click on a booby-trapped link, an attack program could send the handler a poisoned script. While the result of a successful attack on a user would only be to enable "unintended information disclosure" -- rather than compromise the entire system -- the fact that proof-of-concept code and discussions of the hole have already been posted on the Internet raises the urgency level for Microsoft (NASDAQ: MSFT) to warn security professionals pronto. The advisory provides a client-side workaround. Additionally, the company said it is working on a patch.

Related Stories

Microsoft urges companies to dump Windows XP - 09/19/2011 10:09 AM
In an new post on the official Windows blog site, Microsoft's Stephen L Rose stated that there are two big reasons for leaving Windows XP behind. One of them is, of course, the fact that there is a ne...

Microsoft shows off Windows 8 preview - 09/14/2011 10:04 AM
Microsoft presented a developer preview of Windows 8 at its BUILD conference in Los Angeles. The company demonstrates the new Metro user interface, Internet Explorer 10, new touch features and many ot...

Microsoft adds RAW preview support to Windows 7 - 07/28/2011 10:04 AM
After a quick codec pack download, those of you running Windows 7 or Vista should be able to preview RAW files straight from Windows Explorer, without having to use third-party tools like Adobe Bridge...

AMD Bulldozer APU could Power Microsoft's Next Xbox Console - 07/22/2011 10:43 AM
Accriding to a rumor on the web Microsoft's next-generation Xbox gaming console might be powered by an AMD-designed accelerated processing unit that is based on the Bulldozer architecture, according t...

Microsoft reveals 128-bit AES encryption based wireless keyboard - 06/07/2011 09:04 AM
Mircosoft announced the Wireless Desktop 2000, a new wireless keyboard that protects your keystrokes with AES 128-bit encryption. The unit will be available within about a month for roughly $40. The e...