The Register® — Biting the hand that feeds IT

Feeds

Acer 'preloads vulns' onto notebooks

  • alert
  • print

Ripe for exploitation

By John Leyden • Get more from this author

Posted in Security, 10th January 2007 18:49 GMT

Watch Now : Virtual Machine Movement with Hyper-V

Acer has been called out for pre-loading a vulnerability on its notebooks.

A library file, called LunchApp.ocx, on the devices is set up to turn on the "safe for scripting" feature that means users are more vulnerable to ActiveX exploits. The "feature," designed to make it easier to browser Acer's site means systems can download potentially malicious Active X controls, without warning, if they happen to stray onto websites controlled by hackers.

This reduction in security defences was uncovered by security researchers at anti-virus firm F-Secure during testing of the LunchApp.ocx library, as explained here.

Acer is yet to respond to our requests for comment. ®

Watch Now : Virtual Machine Movement with Hyper-V

Hands on with Hyper-V 3.0 and virtual machine movement

Our award-winning Regcasts have teamed up with training provider QA for the deepest of deep dives into Hyper-V, including a live demo.

Understand VM movement - just click to play, or go here for a bigger version.