About Me

Craig Schmugar

Craig Schmugar

Read More

Feeds & Podcasts

Blogs

Meet the Bloggers

Archive

Tags

#SecChat $1 million guarantee 12 Scams of Christmas access to live fraud resolution agents Acquisition Alex Thurber Android antivirus Apple botnet Channel Partners cloud security Compliance Consumer counter identity theft credit card fraud and protection credit fraud alerts credit monitoring credit monitoring and resolution critical infrastructure Cyber Security Mom cyberbullying Cybercrime cybermom data breach data center data center security Data Protection Dave DeWalt DLP Email & Web Security embedded encryption Endpoint Protection enterprise facebook fake anti-virus software Family Safety Friday Security Highlights global threat intelligence google government Hacktivism how to talk to kids how to talk to teens identity fraud identity fraud scams identity protection identity protection $1 million guarantee identity protection fraud identity protection surveillance identity surveillance identity theft identity theft expert identity theft fraud identity theft protection identity theft protection product Identity thieves and cybercriminals intel iphone kids online behavior lost wallet protection malware McAfee McAfee Channel McAfee Family Protection McAfee Identity Protection McAfee Initiative to Fight Cybercrime McAfee Labs McAfee security products Mid-Market Mobile mobile malware mobile security monitor credit and personal information Network Security online personal data protection online safety Operation Aurora PCI personal identity theft fraud personal information loss personal information protection phishing privacy proactive identity protection proactive identity surveillance Public Sector restore credit and personal identity Risk and Compliance scam scams scareware security smartphones social media social networking social networks spam Stuxnet twitter vulnerability Web 2.0 work with victim restore identity

McAfee Labs :

Unpatched Drive-By Exploit Found on the Web (Follow-Up)

Thursday, March 29, 2007 at 9:31am by Craig Schmugar
Craig Schmugar

In response to this issue, Microsoft has posted Security Advisory 935423. Microsoft states the following operating systems are vulnerable:

  • Microsoft Windows 2000 Service Pack 4
  • Microsoft Windows XP Service Pack 2
  • Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium)
  • Microsoft Windows XP Professional x64 Edition
  • Microsoft Windows Server 2003
  • Microsoft Windows Server 2003 for Itanium-based Systems
  • Microsoft Windows Server 2003 Service Pack 1
  • Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
  • Microsoft Windows Server 2003 x64 Edition
  • Microsoft Windows Vista

Last night I had a chance to test Vista’s vulnerability. In the process of setting up the environment, I dragged and dropped a malicious ANI file to the desktop. This causes Vista to enter an endless crash-restart loop. I captured a video of this occurring.

Note, this crash-restart doesn’t represent current real-world attacks, which are delivered over the Web. Those attacks would likely come through a Web browser.

Bookmark and Share

Submit your own comments / message for this post

Your email is never published nor shared. Required fields are marked *

 

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

« Older Comments

Comments (26)

  • Hippocrat June 23, 2009 9:40AM

    People should get it that although the easiest attack method would be html( email, web, memory card, etc ) the attack is not restricted to that distribution mechanism.

    Reply
  • Registry Cleaner February 4, 2009 10:25PM

    People should get it that although the easiest attack method would be html( email, web, memory card, etc ) the attack is not restricted to that distribution mechanism.

    Reply
  • Template February 24, 2008 6:17AM

    One of the many disadvantages of every new Windows edition is the fact that the operating system becomes more and more bloated. Microsoft adds new features to Windows which could then be used to exploit the system. Instead of concentrating on fast efficient systems they produce heavy systems that look shiny but have problems under the surface. Recently a vulnerability in Windows Animated Cursor Handling was discovered. In order for this attack to be carried out, a user must either visit a Web site that contains a Web page that is used to exploit the vulnerability or view a specially crafted e-mail message or email attachment sent to them by an attacker

    Reply
  • Alan Litchfield November 15, 2007 4:49PM

    I am running XP – SP2 and am experiencing a similar problem. I had a trojan try to come in on an attachment which my antivirus caught. However, almost immediately, Windows Explorer began crashing and restarting, recycling about every 20 seconds. I have run several antivirus programs, Adaware, Spybot, and other registry checkers. All came up clear. I also copied in an “explorer.exe” from an unaffected computer. Nothing has fixed my problem. Any suggestions?

    Reply
  • Carmel Lisciotto June 10, 2007 4:28AM

    An informative update.

    I will pass this along.

    Carmelo Lisciotto

    Reply
  • macewan April 24, 2007 11:21AM

    @zezitinho, check out milw0rm

    cheers

    Reply
    • « Older Comments