Patched Windows bug wreaks havoc

Powered by SC Magazine
 

Vulnerability used to target political, industrial and defense organisations.

A critical Windows vulnerability that Microsoft patched in April continues be used in targeted attacks against companies, security researchers are warning.

Many of the attacks appear to be going after political, industrial and defense interests.

For instance, a malicious document exploiting the vulnerability, which resides in Windows Common Controls, recently targeted a defense contractor according to Sophos senior threat researcher Paul Baccas. 

He did not identify the contractor, but wrote that there have been a "large number of files" exploiting the same vulnerability being emailed to companies in "a diverse number of sectors."

As reported by SC, another document specially crafted to exploit the same flaw targeted people interested in the recent ASEAN Defense Ministers' Meeting.

Symnatec software engineer Takashi Katsuki said when the malicious file was opened, it displayed a document containing contact information of each member country's military-related personnel.

The problem bug, CVE-2012-0158, remains in heavy use, Kaspersky Lab researcher Kurt Baumgartner told SC.

More than 90 exploit documents targeting the weakness have been collected as of June, according to a post by malware researcher Mila Parkour on the Contagio blog, a malware sample collection site.

The file names included references to a Pakistan and Chinese missile tests, military reports and even a fax to UNESCO. Other filenames were more generic, such as "schedule," "criteria" and "info." Most of the samples, collected between April and June, were "mostly APT targeted," Parkour wrote.

The exploit takes advantage of an issue in the component MCSOMCTL OCX, and if triggered could result in remote code execution.

This particular flaw affects Office 2003 through 2010 on Windows, SQL Server 2000 through 2008 R2, BizTalk Server 2002, Commerce Server 2002 through 2009 R2, Visual FoxPro 8 and 9, and Visual Basic 6 Run-time

"There are really no excuses for not having applied [the patch]," Baccas wrote.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


Patched Windows bug wreaks havoc
 
 
 
Top Stories
Westpac committed to core banking plan
[Blog post] Now with leadership.
 
The True Cost of BYOD - 2014 survey
Twelve months on from our first study, is BYOD a better proposition?
 
Photos: Unboxing the Magnus supercomputer
Pawsey's biggest beast slots into place.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Apple's top MacBook Pro with Retina is now cheaper
Aug 1, 2014
Apple has updated its MacBook Pro range with faster processors and new pricing, including ...
Pass on carbon tax savings, warns ACCC
Jul 24, 2014
The ACCC is warning businesses that supply "regulated goods" to pass on any cost savings ...
Have customers that won't pay debts?
Jul 10, 2014
The ACCC and ASIC have updated their advice when it comes to collecting debts.
Carpet cleaner faces court over online testimonials
Jul 4, 2014
The ACCC has initiated proceedings against A Whistle (1979) Pty Ltd, the franchisor of Electrodry...
You can now get 15GB of free online storage using Microsoft OneDrive
Jun 25, 2014
Cloud storage has reached both the capacity and price where it's a viable alternative to local ...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  30%
 
Application integration concerns
  3%
 
Security and compliance concerns
  27%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  22%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  4%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 1166

Vote