Once again, there is a flaw in the way something from Microsoft was written. There is a new exploit that allows arbitrary code to be executed on the client side using an animated cursor vulnerability. Here’s an excerpt from the site…
A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user’s system.
The vulnerability is caused due to an unspecified error in the handling of animated cursors and can e.g. be exploited by tricking a user into visiting a malicious website using Internet Explorer or opening a malicious e-mail message.
Successful exploitation allows execution of arbitrary code.
So be careful where you go for awhile.
Quick Info: Affects IE users on windows xp, 2000, and vista.
Helpful Link: http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/luawinxp.mspx
http://secunia.com/advisories/24659/
Related posts:
Blog