Watch out for Windows AppLocker security flaw
A new vulnerability in Windows has resulted in business-focussed versions of the operating system being exploited through their AppLocker feature, according to Engadget.
AppLocker lets users blacklist or whitelist apps, but researcher Casey Smith discovered a vulnerability that gets around this security barrier.
If a user instructs Regsvr32 to point to a remotely-hosted file, they can make a system run whichever app they want – an entry point hackers could use.
There isn’t a patch for the flaw yet, and Microsoft did not respond to questions from Engadget at the time of publication.
Engadget said setting Windows Firewall to block Regsvr32 may close the security hole until a patch is issued.
More on Windows
Warning: Uninstall Apple QuickTime for Windows now
Windows Blue Screen of Death gets QR codes
Loading ...