http://it.slashdot.org/it...l?tid=220&tid=109&tid=172Windows XP Flaw 'Extremely Serious'
Posted by Zonk on Friday December 30, @08:49AM
from the escalation dept.
scottott wrote to mention a Washington Post article with the news that the security hole we mentioned on Wednesday has widened. Computers can now be infected just by visiting infected web sites, or looking at images in the preview panel of older versions of Outlook. From the article: "At first, the vulnerability was exploited by just a few dozen Web sites. Programming code embedded in these pages would install a program that warned victims their machines were infested with spyware, then prompted them to pay $40 to remove the supposed pests. Since then, however, hundreds of sites have begun using the flaw to install a broad range of malicious software. SANS has received several reports of attackers blasting out spam e-mails containing links that lead to malicious sites exploiting the new flaw, Ullrich said."
http://www.microsoft.com/...rity/advisory/912840.mspx
http://www.washingtonpost...2/29/AR2005122901456.html