Attacks prompt third parties to fix flaw

Attacks prompt third parties to fix flaw

Attacks targeting the latest flaw in Microsoft's operating system have
convinced two groups to release temporary fixes to protect users while the
software giant develops its own patch.

The attacks attempt to exploit the Windows Shell vulnerability acknowledged
by Microsoft last week, according to the SANS' Internet Storm Center, which
raised its alert level to Yellow after the organization's handlers received
reports of a significant number of attacks.

Two groups have published software tools to protect against attacks that
attempt to exploit the Windows Shell vulnerability. Security professionals
who previously formed the Zeroday Emergency Response Team (ZERT) published
on Saturday an update for a custom security tool aimed at protecting users
temporarily from the attacks. Security firm Determina has also developed a
software patch that will protect users against the attacks.


http://www.securityfocus.com/brief/318

Imhotep