Feeds

Think unpatched Win XP hole's not a big deal? Hope you trust your local users

Vulnerability used to breathe life into Adobe Reader exploit, Microsoft warns

Build a business case: developing custom apps

An unpatched vulnerability in Windows XP and Windows Server 2003 creates a means for hackers to gain admin rights on vulnerable Windows XP machines, Microsoft warned on Wednesday.

The zero-day local privilege escalation vulnerability is not suitable for remote code execution but might allow a standard user account to execute code in the kernel. As such, the bug is not that much use on its own, but potentially troublesome when mixed in a cocktail with other software vulnerabilities in order to formulate workable attacks.

Unfortunately this has already happened and the vulnerability has already been used in anger in conjunction with an Adobe Reader exploit to target a recently patched vulnerability in the widely used PDF reader software, anti-malware firm FireEye warns. Simply put, the Windows bug allows hackers to bypass Adobe's sandbox defences but only on older versions of Reader.

The combined exploit targets Adobe Reader 9.5.4, 10.1.6, 11.0.02 and prior on Windows XP SP3. XP users who are running the latest versions of Adobe Reader are immune from the attack, so upgrading to the latest version of Abode Reader is probably the best way of blocking potential attacks. Windows Server 2003 is also vulnerable to same privilege escalation vulnerability but are not anywhere near as at risk of attack (unless a BOFH opens a email containing rigged PDFs from a vulnerable server, or other unlikely scenarios), hence the focus on the millions upon millions of vulnerable Win XP systems.

Microsoft plays down the seriousness of the vulnerability while admitting it has been abused in "limited, targeted attacks".

The Adobe flaw was patched in August, according to cloud security firm Qualys.

"Users that have the latest version of Adobe Reader are immune to the attack, as well as users that are running on Windows Vista or later," Wolfgang Kandek, CTO a Qualys, explains in a blog post. ®

The essential guide to IT transformation

More from The Register

next story
Rupert Murdoch says Google is worse than the NSA
Mr Burns vs. The Chocolate Factory, round three!
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Germany 'accidentally' snooped on John Kerry and Hillary Clinton
Dragnet surveillance picks up EVERYTHING, USA, m'kay?
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
Think crypto hides you from spooks on Facebook? THINK AGAIN
Traffic fingerprints reveal all, say boffins
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Solving today's distributed Big Data backup challenges
Enable IT efficiency and allow a firm to access and reuse corporate information for competitive advantage, ultimately changing business outcomes.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.