Windows USB stick flaw affects all versions of OS

By

Vulnerability being actively exploited.

Attackers are actively exploiting a flaw affecting all supported versions of Windows which allows malicious code to be executed when users insert a malicious USB stick into their computers.

Windows USB stick flaw affects all versions of OS

In a bulletin today, Microsoft advised the elevation of privilege vulnerability exists within the Mount Manager component in Windows.

Attackers can exploit the vulnerability - which exists because the Windows Mount Manager processes symbolic links improperly - to write a malicious binary to disk and execute it.

An attacker would only need to insert a malicious USB into the target's system to trigger executable code, Microsoft said.

Today's bulletin included a patch which removes the vulnerable code from the Mount Manager component.

But Microsoft warned that installing Windows language packs would require today's patch to be reinstalled.

Microsoft said it believed attackers have already exploited the vulnerability against Windows users.

In addition to the patch, Microsoft also today released a tool that allows patched computers to log attempts to exploit the bug, to more easily identify whether they had been targeted.

The USB bug fix was one of 14 patches Microsoft released today.

 

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © iTnews.com.au . All rights reserved.
Tags:

Most Read Articles

Melbourne dev finds gift card PINs can be brute-forced

Melbourne dev finds gift card PINs can be brute-forced

Department of Health to centralise SecOps model

Department of Health to centralise SecOps model

Zero-click Apple and WhatsApp bug combo used to drop gov spyware

Zero-click Apple and WhatsApp bug combo used to drop gov spyware

Jaguar Land Rover hit by cyber incident

Jaguar Land Rover hit by cyber incident

Log In

  |  Forgot your password?