[ISN] Researcher: Code-execution bug affects 200 Windows apps

From: InfoSec News <alerts_at_private>
Date: Fri, 20 Aug 2010 02:07:20 -0500 (CDT)
http://www.theregister.co.uk/2010/08/20/windows_code_execution_vuln/

By Dan Goodin in San Francisco
The Register
20th August 2010

About 200 Windows applications are vulnerable to remote code-execution 
attacks that exploit a bug in the way the programs load binary files for 
the Microsoft operating system, a security researcher said Thursday.

The critical vulnerability, which has already been patched in Apple's 
iTunes media player for Windows and VMware Tools, will be especially 
challenging to fix, because each application will ultimately need to 
receive its own patch, Mitja Kolsek, CEO of application security 
consultancy Acros Security, told The Register. He agreed with fellow 
researcher H D Moore, who on Wednesday said the critical vulnerability 
is trivial to exploit.

At the time, Moore estimated 40 programs were vulnerable, but security 
experts from Slovenia-based Acros have found that about 200 of the 220 
applications they've tested so far suffer from what they're calling the 
binary-planting bug. They have yet to complete their inquiry.

“We are expecting that there should be many more,” Kolsek said. “We were 
just looking for those vulnerabilities that were exploitable in terms of 
the user double-clicking a document or doing a couple of things with the 
menu.”

[...]


_______________________________________________________      
Subscribe to InfoSec News - www.infosecnews.org
http://www.infosecnews.org/mailman/listinfo/isn
Received on Fri Aug 20 2010 - 00:07:20 PDT

This archive was generated by hypermail 2.2.0 : Fri Aug 20 2010 - 00:25:14 PDT