Three Microsoft Bugs Found

Jeremy Kirk, IDG News Service

Microsoft is warning of two bugs in its software that could potentially give unauthorized control or access over a person's computer, while a third problem has been highlighted by a security research company.

One vulnerability revisits the Windows Metafile (WMF) debacle from December, but impacts fewer users. The bug is in Internet Explorer (IE) 5.01 Service Pack 4 on the Windows 2000 Service Pack 4 OS and IE

5.5 Service Pack 2 on Windows Millennium, Microsoft says.

An attacker could gain control if a user opened a malicious e-mail attachment or if a user were persuaded into visiting a Web site that had a specially-crafted WMF image, Microsoft says.

A patch has not been issued, but Microsoft says the issue is under investigation, and an out-of-cycle patch could be provided depending on customer needs. Microsoft typically issues patches on the second Tuesday of the month, due this month on February 14.

Second Flaw Found

A second vulnerability could allow a person with low-user privileges gain higher-level access, Microsoft says. Proof-of-concept code that has been released attempts to exploit overly permissive access controls on third-party application services, along with the default services of Windows XP Service Pack 1 and Windows Server 2003, the company says. No attacks have been reported.

Microsoft says several factors diminish the threat of the problem. Those running Windows XP Service Pack 2 and Windows Server

2003 Service Pack 1 -- the latest updates of the software -- are not affected, and someone who launches an attack would need authenticated access to the affected OS, it says.

Security vendor Secunia detailed a third vulnerability involving Microsoft's HTML Help Workshop, software that can create online help for a software application or Web site content.

Secunia says the problem "is caused due to a boundary error within the handling of a '.hhp' file that contains an overly long string in the 'contents file' field. This can be exploited to cause a stack-based buffer overflow and allows arbitrary code execution when a malicious '.hhp' file is opened."

The bug could allow arbitrary code to be executed on a computer, Secunia says. An exploit has been released, and Secunia advises that untrusted.hhp files not be opened.

Copyright 2006 PC World Communications, Inc.

NOTE: For more telecom/internet/networking/computer news from the daily media, check out our feature 'Telecom Digest Extra' each day at

formatting link
. Hundreds of new articles daily. And, discuss this and other topics in our forum at
formatting link
(or)
formatting link

*** FAIR USE NOTICE. This message contains copyrighted material the use of which has not been specifically authorized by the copyright owner. This Internet discussion group is making it available without profit to group members who have expressed a prior interest in receiving the included information in their efforts to advance the understanding of literary, educational, political, and economic issues, for non-profit research and educational purposes only. I believe that this constitutes a 'fair use' of the copyrighted material as provided for in section 107 of the U.S. Copyright Law. If you wish to use this copyrighted material for purposes of your own that go beyond 'fair use,' you must obtain permission from the copyright owner, in this instance, PC World Communications.

For more information go to:

formatting link

Reply to
Jeremy Kirk
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.