The most important news on technology, developments and trends with insightful analysis.
Coverage includes hardware, software, networking, wireless computing, personal technology, security and cutting-edge technology from the developer world to the consumer world.

categories

All News Accessories Announcements Auto / Moto Cameras Communications Cooling / PSU CPU Design Desktops Developers World / Science Displays Entertainment Gadgets GPS Hardware Internet Mainboards Memory Mobile Devices Multimedia Networking Peripherals Phones Servers Software Storage Video / Graphics Watches Wireless Miscellaneous

Microsoft Investigating New Internet Explorer Flaw
Microsoft Investigating New Internet Explorer Flaw
Another bug was found in Internet Explorer. Oh yay.

The Microsoft Security Response Center issued a warning Friday indicating that users of Internet Explorer 6, 7 and 8 are vulnerable to malware through an un-patched bug in VBScript. The exploit was originally uncovered by Polish security analyst Maurycy Prodeus of iSEC Security Research. He said that the flaw only resides within Windows XP SP3-all other versions of Windows are not affected by the vulnerability.

According to this post, it's possible to invoke winhlp32.exe from Internet Explorer which in turn might lead to remote code execution. Attackers could execute malicious code when their fake web pages convince visitors to press the F1 key. The good news is that Microsoft has not received reports on attackers actually using this exploit.

"Windows Help files are included in a long list of what we refer to as unsafe file types," Microsoft reports. "These are file types that are designed to invoke automatic actions during normal use of the files. While they can be very valuable productivity tools, they can also be used by attackers to try and compromise a system."

Microsoft said that it's currently investigating the situation, and will "take appropriate action to protect customers." Microsoft suggests that consumers follow its "Protect your Computer" guidelines by enabling a firewall, applying all software updates, and keeping anti-virus definitions up-to-date.

Still, Windows XP users may want to consider alternate browsers, as Internet Explorer is a high-profile target for malware developers.
, , , , , , ,
Internet
18:31, Monday, March 1, 2010

random articles

OnStar expands smartphone control over entire 2011 GM lineup

OnStar expands smartphone control over entire 2011 GM lineupIt's safe to say that General Motors is struggling for relevancy these days and, while the Chevy Volt could be a huge step into the modern era for the company, that still leaves every other car looking a bit - traditional, technology-wise.

ZTE and OKWAP team with Intivation to deliver next generation solar devices

ZTE and OKWAP team with Intivation to deliver next generation solar devicesLet's be honest, we'd scorch the Earth to eke just one more hour of power from our superphones. Fortunately, as residents of the western world we've got plenty of juice to power all of our gadgets.

Google TV: everything you ever wanted to know

Google TV: everything you ever wanted to knowGoogle made some waves yesterday when it announced the new Google TV platform, backed by major players like Sony, Logitech, Intel, Dish Network, and Best Buy.

Apple files second patent infringement lawsuit against HTC

Apple files second patent infringement lawsuit against HTCApple launched yet another attack against HTC this week with a second patent infringement lawsuit filed in Delaware District Court.

Cube C30... A new Chinese DAP with strong... arguments

Cube C30... A new Chinese DAP with strong... argumentsThe Cube C30 is just your ordinary made in China nice little DAP with 32GB of internal memory, supporting both Flac and APE, even has a memory card slot, TTS Voice reading, eBook Reader, Digital Recording, and some VERY appealing marketing arguments Now its time for me to move back to China.