Microsoft reports two bugs; a third is identified
Flaws could enable unauthorized control of user's computer
IDG News Service - Microsoft Corp. is warning of two bugs in its software that could potentially give unauthorized control or access over a person's computer, while a third problem has been highlighted by a security research company.
One vulnerability revisits the Windows Metafile (WMF) debacle from December but affects fewer users. The bug is in Internet Explorer 5.01 Service Pack 4 on Windows 2000 Service Pack 4 and IE 5.5 Service Pack 2 on Windows Millennium, Microsoft said.
An attacker could gain control if a user opened a malicious e-mail attachment or if a user were persuaded to visit a Web site that had a specially crafted WMF image, Microsoft said.
A patch has not been issued, but Microsoft said the issue is under investigation, and an out-of-cycle patch could be provided depending on customer needs. Microsoft typically issues patches on the second Tuesday of the month, so the next round of patches would be due Feb. 14.
A second vulnerability could allow a person with low user privileges to gain higher-level access, Microsoft said. Proof-of-concept code that has been released attempts to exploit overly permissive access controls on third-party application services, along with the default services of Windows XP Service Pack 1 and Windows Server 2003, the company said. No attacks have been reported.
Microsoft said several factors diminish the threat of the problem. Those running Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1 -- the latest updates of the software -- are not affected, and someone who launches an attack would need authenticated access to the affected operating system, it said.
Security vendor Secunia detailed a third vulnerability. It affects Microsoft's HTML Help Workshop, which is software that can create online help for a software application or Web site content.
Secunia said the problem "is caused due to a boundary error within the handling of a '.hhp' file that contains an overly long string in the 'contents file' field. This can be exploited to cause a stack-based buffer overflow and allows arbitrary code execution when a malicious '.hhp' file is opened."
The bug could allow arbitrary code to be executed on a computer, Secunia said. An exploit has been released, and Secunia advised users not to open untrusted .hhp files.
- Deep Security +VMware vSphere with Operations Management Most midsize organizations are highly virtualized on VMware, and while this has produced significant savings, it also has created new challenges when it...
- 3 Questions to Ask Your DNS Host about Lowering DDoS Risks Neustar has had wide-ranging conversations with clients wanting to know how they can optimize protection as DDoS attacks increase in frequency and size.
- The Danger Deepens: 2014 Neustar Annual DDoS Attacks and Impact Report This report compares DDoS findings from 2013 to 2012, based on a survey of 440 North American companies, including 139 businesses delivering technology...
- DDoS Infographic: How Are Attacks Evolving? For the third consecutive year, Neustar surveyed businesses across major industries to track the evolution of DDoS attacks. Are they more frequent? Larger?...
- How to Use Crowd-Sourced Threat Intelligence to Stop Malware in its Tracks Threat sharing networks have been around for a long time, however they have typically been "invitation-only", available to only large companies, or those...
- An Incident Response Playbook: From Monitoring to Operations As cyber-attacks grow more sophisticated, many organizations are investing more into incident detection and response capabilities. In this webcast, learn how to develop... All Malware and Vulnerabilities White Papers | Webcasts