Technology news and Jobs 
Information Technology News Vista users threatened by Windows Mail exploit
Information Technology News Vista users threatened by Windows Mail exploit | Vista users threatened by Windows Mail exploit |
|
| by Stan Beer | |
| Saturday, 24 March 2007 | |
  
Featured Whitepaper
5 Best Practices for Smartphone Support
According to the Kingcope: "Remote Code Execution is possible if a user clicks on a malicious prepared link. Vistas Mail Client will execute any executable file if a folder exists with the same name. For example the victim has a folder in C:\ named blah and a batch script named blah.bat also in C:\. Now if the victim clicks on a link in the email message with the URL target set to C:\blah the batch script is executed without even asking. There is for example a CMD script by default in C:\Windows\System32\ named winrm.cmd (and also a folder named winrm inside System32)." Needless to say, the description provides a perfect example as to why email recipients should not click on links from unknown sources.
Kingcope had previously on March 10 posted a message to the Full
Disclosure list advertising zero day exploits for sale.{moscomment} |
Tags
| < Next story in category | Previous story in the category > |
|---|
