Security vendors have seen series of targeted attacks that used malformed .ani files. The flaw allows attacks to take over control of a system without any user interaction.
The attack is launched when the user receives a specially-crafted .ani file embedded in either a web page or e-mail message. The file is installed on the user's system and then delivers its malicious payload.
Nearly all supported versions of Windows and Internet Explorer are vulnerable to the attack. Only users running Windows Vista and Internet Explorer 7 in protected mode appear to be safe, said Microsoft. In protected mode, no file is allowed to access or modify any system files without user permission.
Alternative browsers such as Firefox or Opera do not appear to be vulnerable to the attack.
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
.png&w=120&c=1&s=0)
EDUtech AU
.png&w=120&c=1&s=0)
Security Exhibition & Conference 2025
Integrate Expo 2025
Digital As Usual Cybersecurity Roadshow: Brisbane edition
iTnews Benchmark Security Awards 2025
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
