Russian hackers exploit Windows bug

http://www.isightpartners.com/2014/10/cve-2014-4114/

An exposed dangerous method vulnerability exists in the OLE package manager in Microsoft Windows and Server
Impacting all versions of the Windows operating system from Vista SP2 to Windows 8.1
Impacting Windows Server versions 2008 and 2012

When exploited, the vulnerability allows an attacker to remotely execute arbitrary code

The vulnerability exists because Windows allows the OLE packager (packager .dll) to download and execute INF files. In the case of the observed exploit, specifically when handling Microsoft PowerPoint files, the packagers allows a Package OLE object to reference arbitrary external files, such as INF files, from untrusted sources.

This will cause the referenced files to be downloaded in the case of INF files, to be executed with specific commands

An attacker can exploit this vulnerability to execute arbitrary code but will need a specifically crafted file and use social engineering methods (observed in this campaign) to convince a user to open it
Click to expand...
 
Knowing the Russians they'll do something stupid like post "I vant to **** jor muvver" on the hacked pc.
 
the contents of phishing emails used to infect computers with tainted files
Click to expand...

It has never been more important to educate users and also for the users themselves to use their common reasoning
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X