News: Microsoft warns of zero-day Windows bug
Category:
Operating Systems,
Bugs / Virus
Posted: March 29, 2007 08:13PM
Author:
Nemo
ComputerWorld - Microsoft Corp. confirmed today that Windows, including Vista, contains a critical unpatched vulnerability that can be used by attackers to usurp PCs when users surf to malicious sites. In a security advisory posted this morning, Microsoft's Security Response (MSRC) team acknowledged a bug in Windows' animated cursor, a component that lets developers show a short animation at the mouse pointer's location. Animated cursor files typically use the .ani extension, but the MSRC warned that hackers might disguise malicious animated cursors with other extensions. The SANS Institute, in fact, said it had received reports of in-the-wild exploits using files renamed to .jpg.
