Symantec issued a warning on Friday afternoon via its DeepSight threat service that hackers are working a bug that was patched via Microsoft’s April Patch Tuesday. Only Windows XP SP3 is safe, the report says, according to the blog Neowin.net. Hackers are trying to exploit the critical Windows GDI (graphics device interface) bugs. The hole can be accessed through a malformed Windows Metafile or Enhanced Metafile image, Microsoft said.
However, Symantec said that the attacks are not well executed and that the initial attempts to take advantage of unpatched systems have fallen flat. Nevertheless, if you haven’t gotten around to deploying your critical Patch Tuesday updates and you are using operating systems other than XP SP3, better get on it.
Go to the Microsoft Subnet home page for more news, blogs, podcasts. More Microsoft Subnet blog posts:Google: Actively looking for ways to spoil Yahoo/MicrosoftAOL, News Corp. jump into Microsoft/Yahoo dealYahoo cozying up to Google; Microsoft cries “monopoly” Forefront “Stirling” beta released at RSAMicrosoft: Can we all work together to create trust? Microsoft told to pay Alcatel-Lucent $367 million All Microsoft Subnet blog postsSign up for the bi-weekly Microsoft newsletter. (Click on News/Microsoft News Alert.)
