[FT.Informe]: Dependencia de Microsoft es problema de seguridad para EE.UU.

Ah !! . Ya lo dijo el abuelo, de aquellos polvos, vienen estos lodos.

From: "Johannes Niebach"
Newsgroups: grc.security
Sent: Tuesday, September 30, 2003 6:58 PM
Subject: Unpatched Explorer hole is hackers' 'gold mine'


A long-ignored security hole in Microsoft Internet Explorer is a gold mine
for hackers, providing an easy way for them to plant malicious programs on
vulnerable machines through hacker websites and instant messaging
applications. New attacks using the vulnerability include a worm that
spreads through America Online Instant Messenger (AIM) and a malicious
website which silently loads snooping software on victims' machines,
according to independent security expert Richard Smith. Microsoft did not
immediately respond to requests for comment. The security hole, known as the
Object Data vulnerability, is in software code used by Explorer to process
HTML pages containing an element called the Object Data tag. When properly
exploited, the vulnerability enables an attacker to place a malicious
computer program on a user's machine. No user actions are required to infect
a machine, aside from opening an e-mail message or visiting a web page
rigged by an attacker. Last month Microsoft issued software patch MS03-032,
which was supposed to fix the problem. However, that patch failed to close
the hole on Windows machines running Explorer versions 5.01, 5.5 and 6.0.
Earlier this month, Microsoft acknowledged there were problems with the
MS03-032 patch and promised to issue a fix as soon as possible. Since then,
no changes have been made to the patch, and hackers moved quickly to take
advantage of Microsoft's slow response.
http://www.computerweekly.com/artic...iArticleID5296&liFlav
ourID=1&sp=1

Regard:
"If U know neither the enemy nor yourself,U will succumb in every battle"