January 4, 2006

According to Microsoft, the company will issue a new Windows security patch for a widely known vulnerability in the Windows operating system, as part of its monthly update cycle.

Microsoft says hackers can use this security hole to take control of a computer through a specially crafted Windows Metafile (.wmf) image.

Such an image can be used on a website or sent by email or in an instant message. Microsoft and various security vendors have reported that attackers are actively using all these methods in an attempt to infect systems.

Security website Secunia gave the vulnerability its most severe rating of 'extremely critical'.

Get the best Linux or Windows Web hosting plan for your website.

All versions of Windows are vulnerable, according to security provider F-Secure, but systems running Windows XP or Server 2003 are most at risk.

Microsoft has developed a patch for the security hole and is currently testing it to enable a release next week.

Although Microsoft acknowledged that the flaw is being actively exploited, the company claimed that the scope of the attacks is not widespread.

Antivirus software is blocking most of the attacks through updated signature files, allowing the security software to recognise infected files before they can cause any harm, according to Microsoft.

Russian software engineer Ilfak Guilfanov has already released an unofficial fix which F-Secure has endorsed on its company blog.

Users who choose to install Guilfanov's patch will have to uninstall it before they run next week's Microsoft patch.

Source: Vnunet

Save Internet Security.ca's URL to the list of your favorite web sites in your Web browser by clicking here.

Become an authorized reseller of Proxy Sentinel™ and Firewall Sentinel™. Do like the rest of our authorized resellers and have your clients benefit the important security features of our products and solutions, while increasing your sales at the same time. Click here for all the details.

You can link to the Internet Security web site as much as you like. Read our section on how your company can participate in our reciprocal link exchange program and increase your rankings in the major search engines such as
Google and all the others.