Patched Windows bug wreaks havoc

Powered by SC Magazine
 

Vulnerability used to target political, industrial and defense organisations.

A critical Windows vulnerability that Microsoft patched in April continues be used in targeted attacks against companies, security researchers are warning.

Many of the attacks appear to be going after political, industrial and defense interests.

For instance, a malicious document exploiting the vulnerability, which resides in Windows Common Controls, recently targeted a defense contractor according to Sophos senior threat researcher Paul Baccas. 

He did not identify the contractor, but wrote that there have been a "large number of files" exploiting the same vulnerability being emailed to companies in "a diverse number of sectors."

As reported by SC, another document specially crafted to exploit the same flaw targeted people interested in the recent ASEAN Defense Ministers' Meeting.

Symnatec software engineer Takashi Katsuki said when the malicious file was opened, it displayed a document containing contact information of each member country's military-related personnel.

The problem bug, CVE-2012-0158, remains in heavy use, Kaspersky Lab researcher Kurt Baumgartner told SC.

More than 90 exploit documents targeting the weakness have been collected as of June, according to a post by malware researcher Mila Parkour on the Contagio blog, a malware sample collection site.

The file names included references to a Pakistan and Chinese missile tests, military reports and even a fax to UNESCO. Other filenames were more generic, such as "schedule," "criteria" and "info." Most of the samples, collected between April and June, were "mostly APT targeted," Parkour wrote.

The exploit takes advantage of an issue in the component MCSOMCTL OCX, and if triggered could result in remote code execution.

This particular flaw affects Office 2003 through 2010 on Windows, SQL Server 2000 through 2008 R2, BizTalk Server 2002, Commerce Server 2002 through 2009 R2, Visual FoxPro 8 and 9, and Visual Basic 6 Run-time

"There are really no excuses for not having applied [the patch]," Baccas wrote.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


Patched Windows bug wreaks havoc
 
 
 
Top Stories
AGL restructure sees CIO depart
Owen Coppage to leave after ten years.
 
Data: Advertising's best frenemy
STW Group's Tom Ceglarek faces a digital conundrum: he must feed his client's demand for performance insights while his industry is being undermined by data analysis.
 
Inside Telstra's multi-faceted cloud strategy
An overview of its own cloud and deals with Cisco, VMware, IBM and NextDC.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Small business win in a budget with 'fair' savings: Abbott
Apr 17, 2015
Tony Abbott has reaffirmed that the government’s aim is “always to get taxes ...
Xero now includes an inventory function built-in
Mar 26, 2015
Xero has added inventory and other major new features to the latest release of its cloud ...
Apple reveals its new MacBook
Mar 13, 2015
Replacing the MacBook Air as Apple's thinnest laptop, the new MacBook comes packed with features.
Xero has released a new version of its app for the iPad
Mar 6, 2015
iPad-wielding Xero users can now take advantage of a new version of the iOS app for the cloud ...
Microsoft is offering Azure for Disaster Recovery to Australian SMBs
Feb 10, 2015
If you haven't talked to your IT provider about disaster recovery, it might be worth discussing ...
Latest Comments
Polls
Do you support the Government's data retention scheme?

   |   View results
Yes
  11%
 
No
  89%
TOTAL VOTES: 2128

Vote