Microsoft Patches Windows Vulnerability

Microsoft Corp. released an emergency security patch Tuesday to plug a hole in several versions of Windows

(Seattle) Microsoft Corp. released an emergency security patch Tuesday to plug a hole in several versions of Windows -- including Vista, which the software maker has touted as its most secure operating system ever.

Microsoft was so worried about the hole -- which allowed hackers to break into personal computers and install malicious software -- that it pushed out the critical security fix a week ahead of a regularly scheduled update.

The Redmond-based software company told customers last Thursday about a vulnerability in ".ani" files, which are used to change the cursor into an hourglass while a program works, or into a dancing animal or other animation on specially designed Web sites. Security experts said the hole was actively being exploited by hackers to install keystroke-logging programs.

Ken Dunham, director of the rapid response team at iDefense, the research division of VeriSign Inc., said a group of Chinese hackers was using the security hole to steal and sell log-ins to the popular "World of Warcraft" multiplayer computer game.

Microsoft said it has known about the vulnerability since December.

Users surfing the Web were the first targets, security experts said.

The Microsoft patch "will be a significant milestone in this attack," Dunham said. However, as businesses take time to test and implement the patch, and consumers delay downloading it, hackers will still be at work.

Customers whose Windows computers aren't set to automatically install critical patches can download the security update, MS07-017, from Microsoft's Web site.


  • Motherboard Image

    Darktrace Deal To Bring AI Security to Microsoft Products

    Microsoft and security solutions firm Darktrace plan to integrate the latter's AI products with Microsoft Azure, Azure Sentinel and Microsoft Defender for Endpoint.

  • 2021 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

  • Microsoft Updates Azure Icon, Plans Default Font Change

    Microsoft recently announced a few planned design changes, including a new Azure icon.

  • The 2021 Microsoft Product Roadmap

    From Windows 10X to the next generation of Microsoft's application server products, here are the product milestones coming down the pipeline in 2021.