Jun

16

Critical Zero day exploit for Server 2003SP2 and XP SP3

June 16, 2010 | 1 Comment

Pac IT Pros members: You should be aware of a zero day exploit that affects Server 2003 and XP.  (Server 2008 and Vista/Win 7 are not affected.)  The fix is to disable the HCP protocol used in Help and Support Center.

The exploit allows for remote code execution.  The attack make use of links on web pages or email messages that use the hcp:// prefix rather than the normal http://.  Web links are normally HTTP, but HCP links are used by the Help and Support Center (helpctr.exe) and are not as well known.

This vulnerability could allow hackers to take remote control of affected systems.

Microsoft labels this one as CRITICAL – So run Mr. Fix it today.

http://www.microsoft.com/tec hnet/security/advisory/22194 75.mspx
http://support.microsoft.com  /kb/2219475

Doug


Comments

You must be logged in to post a comment.

Name (required)

Email (required)

Website

Speak your mind