Windows .ANI Problem Surfaced Two Years Ago

An anonymous reader writes "There's a new twist to the tale of Windows .ANI exploit, that's been in the news all week (including when a spam campaign used the teaser of nude Britney Spears pictures to lure people to malicious sites). InformationWeek reports the Windows .ANI bug at issue first surfaced — and was patched — two years ago, in early 2005. 'If they had simply looked for other references for the same piece of code when they originally dealt with it a few years ago, they would have found this and patched it in 2005,' says Craig Schmugar of McAfee. 'It would have saved a whole lot of people a lot of time, money and effort.' Microsoft claims this .ANI vulnerability is different from the old, but beyond that they're not talking."

Comments

Well

[El Lobo]

Well Einstein... Fixing one bug doesn't mean that you will re-visit the whole thing... Even the simplest code in Windowss is part of the BIG SYSTEM, with any component interacts with others . And this is a very complex system. Nobody does as he says. Fopr example, patching a problem with the Linuzzzz kernel doesn't mean that it's patched forever... Nobody can predict that some other problems will raise even with the newly patched code... Oh yes, another thing... MacAfee is the perfect software, I forgot...