Exploit Released for Unpatched Windows Flaw

woodchuck writes "Washington Post reports that another Windows hole has been found and exploit code is now running lose that makes swiss cheese of current patches and security measures. From the article: "Security researchers have released instructions for exploiting a previously unknown security hole in Windows XP and Windows 2003 Web Server with all of the latest patches applied. Anti-virus company Symantec warned of the new exploit, which it said uses a vulnerability in the way Windows computers process certain image files (Windows Meta Files, or those ending in .wmf). Symantec said the exploit is designed to download and run a program from the Web that downloads several malicious files, including tools that attackers could use to control vulnerable computers via IRC.""

Comments

Holy cats

[SilverspurG]

For as much funding and resources as MS has: when are we going to hear of an exploit identified by MS before someone else gets to it first?

For cripes' sakes. Don't these people bug-test their own code? I know I do.

Re:Scary.

[HermanAB]

No you cannot get infected with FF. On Exploder, it is a true worm that installs automatically without user intervention. On FireFox, you have to click a button to allow the site to install the crapware. Granted, 99.999% of Windoze Doodz will probably click it, but at that point the browser has washed its hands of the problem and you cannot blame Firefox for user schtoopidity.

Re:Genius Idiots.

[Anonymous Coward]

with little to no concern about the hundreds of thousands of hours (read: PEOPLE-LIFE-EQUIVALENTS) that will be spent agonizing over and fixing this.

Well, you could always try sending an invoice to Redmond demanding repayment for your lost life. They're the ones who sold you a system that would require lifetimes of work to fix up after it encountered one lame jackass.

Re:Small price to pay

[bergeron76]

I'd rather give up thumbnails (they slow down explorer anyway) and avoid being r00ted by the latest internet worm.

Hehe - you said "explorer".

I predict 0wn3rship in your future, friend. Unfortunately, it won't be by you. Only use a browser that will never compromise you and isn't targeted by the biggest worms. Better still, use an Operating System that only acts as an operating system; and not a complete solution to your entertainment needs.

Of course, you could just give up your basic needs in exchange for your perceived protection.