?They?d have to come up with some way to get the user to click on that file,? said Stephen Toulouse of Microsoft?s Security Response Center, noting that default security settings in recent versions of Microsoft Outlook e-mail software and the Internet Explorer Web browser prevent automatic launching of such files.
As for that security flaw, as long the latest security patches have been installed, there should be no way for this to be an issue unless the user is somehow led to launch that file.
I'm not a big fan of Windoze, but this is one of the few "no big deal" ones to me.
This bug is actually quite old. You can "patch" your NT server by only accepting the newer authentication protocol and removing all 9x/Me machines from connecting to the domain. Anyone hear of and remember l0pht?
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.