Attacks in the wild have already been seen for a vulnerability in DirectX for which Microsoft does not yet have a patch, Microsoft says. XP, Windows 2003 software are vulnerable, as are older versions of Windows (such as Windows Server 2000). Vista, Windows Server 2008 and later versions of Windows are not vulnerable.
The hole is in the quartz.dll in that it could allow an attacker to strike through QuickTime playback plug-ins for any browser using the affected platform -- even if QuickTime is not installed, reports Betanews.com. The issue is with the QuickTime Movie Parser Filter that DirectShow uses to process files in the quartz.dll file.
Three workarounds are available until a patch is ready, according to the Microsoft Security advisory.
The Microsoft Subnet blog is the official blog of the Network World's Microsoft Subnet community, and is written by Online Community editor Julie Bort. Microsoft Subnet is the independent voice of Microsoft customers and is your gateway to daily Microsoft news, blogs, opinion, books, prize giveaways and more. Visit the Microsoft Subnet index page daily, and while you are there, subscribe to the Microsoft newsletter. The newsletter includes news generated by the Microsoft Subnet community as well as other Microsoft news stories published by Network World.
The Leader in Network Knowledge
Post new comment