elgato
Joined: 24 Feb 2005
Posts: 17239
Location: Texas
|
| Posted: Wed Jun 16, 2010 11:18 pm Post subject: Windows XP Zero-Day Targeted by Hackers in Drive-by Attack |
|
|
Five days after being disclosed publicly by a Google engineer, a zero-day security vulnerability affecting Microsoft Windows XP has come under attack. The controversial bug, which remains unpatched, gave rise to a new round of debate about responsible disclosure.
Attackers have begun exploiting a zero-day vulnerability to target Windows XP machines. The vulnerability has given rise to renewed debate about responsible disclosure.
According to Sophos Senior Technology Consultant Graham Cluley, a legitimate Website pushing open-source software was seen serving the exploit to PC users. Cluley declined to name the site, but Microsoft confirmed that it was aware the bug was being exploited and said the exploits had been "taken down."
An analysis of the exploits found that Windows Server 2003 systems are not being targeted, according to an updated advisory. However, the vulnerability lies within the Windows Help and Support Center function delivered in both XP and Windows Server 2003, meaning that Windows Server 2003 systems could eventually be targeted.
more.. link to news article |
|
