Microsoft plugs remote execution, spoofing holes in Windows

Updated 11:15 a.m. PST with more information, security expert comments.

Microsoft on Tuesday issued patches for critical holes in all supported versions of Windows that could allow an attacker to take over a system by executing code remotely if the user viewed a maliciously crafted image file.

The patch for Windows 2000, XP, Vista, Server 2003, and Server 2008, plugs a vulnerability (MS09-006) that affects images created with the Enhanced MetaFile (EMF) or Windows MetaFile (WMF) display formats, according to Microsoft's advisory.

"An attacker can send you an e-mail with an infected image in it or you can go to a Web site with an infected image or get it elsewhere, from a thumbdrive," said Wolfgang Kandek, chief technology officer of Qualys, which helps companies with security risk and compliance.

Attackers can also disguise .WMF and .EMF files as other image file types, such as .JPG, in order to sneak them past cautious users, said Alfred Huger, vice president of development at Symantec Security Response.

Also patched on Patch Tuesday were two holes rated "important" that affected the same systems and which could be used by an attacker to masquerade as someone else in a spoofing attack.

One of the important patches, which affects Windows 2000, Server 2003, and Server 2008, resolves two privately reported vulnerabilities and two publicly disclosed vulnerabilities in Windows DNS server and Windows WINS (Windows Internet Name Server). The holes could allow an attacker to redirect network traffic intended for systems on the Internet to a malicious site, according to the advisory.

The second important patch, which affects all supported versions of Windows, (MS09-007) resolves a vulnerability in the Secure Channel security package in Windows. It could allow an attacker to gain access to the certificate used by the end user for authentication. Customers are affected only when the public key component of the certificate used has been accessed by some other means, Microsoft said.

Kandek of Qualys said the risk is minimized by the fact that not many corporations seem to use the technology involved much.

Microsoft has yet to provide a fix for a security vulnerability in Excel from last month, for which there have been zero-day exploits or a zero-day Word-Pad vulnerability from December.

[The_happy_switcher]

Windows: The Humpty Dumpty of OSs.

[kojacked]

AppleRocks1963: The troll of all things Microsoft.

[alegr]

Apple OS-X security update 2009-001 (February 12):
CVE-ID: CVE-2009-0009: Impact: Opening a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution

CVE-ID: CVE-2009-0020: Impact: Opening a file with a maliciously crafted resource fork may lead to an unexpected application termination or arbitrary code execution

CVE-ID: CVE-2008-5050, CVE-2008-5314: Description: Multiple vulnerabilities exist in ClamAV 0.94, the most serious of which may lead to arbitrary code execution

CVE-ID: CVE-2009-0137: (Safari RSS) Impact: Accessing a maliciously crafted feed: URL may lead to arbitrary code execution
CVE-ID: CVE-2009-0138: Impact: Remote attackers may be able to access Server Manager without valid credentials. Description: An issue in Server Manager's validation of authentication credentials could allow a remote attacker to alter the system configuration

CVE-ID: CVE-2009-0139: Impact: Connecting to a maliciously crafted SMB file system may lead to an unexpected system shutdown or arbitrary code execution with system privileges

(this is not complete list)

[Seaspray0]

Alegr... You made your point! LOL.

[Rolker]

@ alegr

Thank you :)

[Mr. Dee]

alegr, thank you very much.

[ittesi259]

Users like AppleRocks makes me not wanna admit I use a mac because of the trollishness.....and while I applaud MS and Apple both for fixing security holes....the excel issue has proof of concept and is being actively exploited....that, regardless of the vendor, is completely unacceptable.

[The_happy_switcher]

If you base what computer you're going to use based upon what someone posts on a forum then I would suggest you have deeper self esteem issues.

[Mr. Dee]

AppleRocks1963, speak for yourself, your alias is 'AppleRocks1963' for peace sake.

[Vegaman_Dan]

Has anyone considered the possibility that AppleRocks1963 is actually a MSFT supporter and is intentionally going out of his way to look like an over the top Apple fanboy in such a way as to mock Apple by presenting himself as an out of touch clueless troll?

It's a possibility that it's a very clever act. But then there's also the very real chance he is exactly what he appears to be.

[The_happy_switcher]

Wow, cover blown. You are one sharp cookie, Veggie Dan.

[The_happy_switcher]

Alegr: HOw many thousands of pages would you need to list all the Windows patches?

[ittesi259]

AppleRocks, you obviously don't read Apple Security Updates, they patch a good number of things each time, do the rest of us Mac users a favore and get off your damn high horse.

[The_happy_switcher]

Why? I kind of like the view from up here.

[Mr. Dee]

Quote:
"Users still facing software issues while running the most current version of Mac OS X Leopard may take kindly to word that Mac OS X 10.5.7 is moving swiftly through its development cycle.

As was reported at the time, that build arrived with nearly six dozen code corrections, a barebones weight of 440 megabytes, and requests that developers focus their testing efforts on over 20 core components, including AirPort, Mail, graphics drivers, and Time Machine."

Source: www.appleinsider.com/articles/09/03/06/apple_ready_with_second_beta_of_mac_os_x_juno.html

Think about that 72 patches after patching this one OS with 6 previous point updates already. This one update alone weighs 440 MBs, I am truly sorry for those who haven't patched since 10.5.1, then again, maybe those Macs have already been dumped and replaced by productive Windows based systems.

[Vegaman_Dan]

Thank you for your comments. They have been and always will be treated with the respect and value that you have earned.

[Dalkorian]

Someone should tell Mr. Dee to Google "darwin unix". Ignorance is not a virtue.

Personally, I'm glad M$ patched what they did in their swiss-cheese OS family but am disappointed they have so far ignored the publicly exploited ex-hell vuln (disappointed, not surprised). Of course, in their "defense" that one is pretty recent - hopefully they don't take much longer!

[Mr. Dee]

UNIX has vulnerabilities that are discovered and exploited everyday. But because no one really use it, it gets swept under the rug.

[Dalkorian]

No one uses Unix? OK dude, if you say so it MUST be true!
;-)

Can I pass off a small hint? Everything people build has flaws because people are flawed creatures. This includes Unix as well as every other OS and every other piece of software ever designed. The question is how easy it is to exploit a system and the answer is out there in the number of viruses and worms exploiting people's machines. Continue to deny that fact at your own peril.

[Mr. Dee]

Here is another one: Hackers crack Apple's iTunes gift card algorithm

Quote:
"$200 iTunes Gift Certificates are selling for less than $3 in China now that a group of local hackers has circumvented Apple's algorithm for creating the digital vouchers and built their own gift certificate generators.

According to Outdustry, which describes itself as a music industry consultancy specializing in the Chinese music business, sellers on China's largest consumer-to-consumer online shopping site are marketing these illegitimate vouchers directly to customers."

Source: www.appleinsider.com/articles/09/03/10/hackers_crack_apples_itunes_gift_card_algorithm.html

[ballmerisanape]

Okay...

[n3td3v]

"Updated 11:15 a.m. PST with more information, security expert comments."

Everyone is an expert nowadays, what makes it that if you work for a brand name company that you get quoted?

[ballmerisanape]

http://en.wikipedia.org/wiki/Stockholm_Syndrome