Microsoft emergency security patch
I've been mildly concerned about this for about a week now.
Microsoft Patches Windows Vulnerability
Apr 4, 7:55 AM (ET)
By JESSICA MINTZ
SEATTLE (AP) - Microsoft Corp. (MSFT) released an emergency security patch Tuesday to plug a hole in several versions of Windows - including Vista, which the software maker has touted as its most secure operating system ever.
Microsoft was so worried about the hole - which allowed hackers to break into personal computers and install malicious software - that it pushed out the critical security fix a week ahead of a regularly scheduled update.
The Redmond-based software company told customers last Thursday about a vulnerability in ".ani" files, which are used to change the cursor into an hourglass while a program works, or into a dancing animal or other animation on specially designed Web sites. Security experts said the hole was actively being exploited by hackers to install keystroke-logging programs.
http://apnews.myway.com//article/20070404/D8O9P4N80.html
I'm not sure it it was a bell or whistle that caused the hole, but the fact is the little animate cursor is the culprit. That little bugger had the potential of allowing hackers to record keystrokes, upload files and more or less ruin your day. There is a patch available by clicking tools in Windows Explorer and then Windows Update. Or you can visit http://www.microsoft.com/security for more information.
UPDATE
Windows cursor patch causing trouble
ZDNet Tags: Microsoft Windows, Security threats, Personal computers, MicrosoftInstalling Microsoft's Tuesday patch for a "critical" Windows vulnerability is causing trouble for some users.
Microsoft broke with its monthly patch cycle Tuesday to repair a bug in the way Windows handles animated cursors. Cybercrooks had been using the hole since last week to attack Windows PCs. But the fix is not compatible with software that runs audio and networking components from Realtek Semiconductor, some Windows users have found.
http://news.zdnet.com/2100-1009_22-6173413.html
Copyright © 2006 CNET Networks, Inc. All Rights Reserved.
Labels: Microsoft, Microsoft Windows, Personal computers, Security threats
