Top > Webmaster > 2006 > August > 2006-08-14

An Attack Code Against Microsoft

A new attack code, which increases the chance of a worm attack, has been released lately. The code exploits a security hole in a Windows component related to file and printer sharing, also raises the urgency to patch. Microsoft provided a fix for the problem with security bulletin MS06-040. According to Microsoft`s statement, millions of Windows users have already downloaded that fix.

Microsoft also added that the published code works only on Windows 2000 and Windows XP Service Pack 1. It does not affect Windows XP Service Pack 2, Windows Server 2003 or Windows Server 2003 Service Pack 1. Microsoft is now on "worm watch", as was said by the company. Christopher Budd, security program manager at Microsoft said: "We have not seen signs of widespread malicious activity so far. But be assured that, like we always do, we`ve got our emergency response process teams watching for any possible malicious activity".

However some security experts do not predict a high-profile worm attack. "A fully automated `big bang` type worm is increasingly unlikely in an Internet world where under-the-radar attacks take place for criminal gain," says director of the rapid response team at security company iDefense Ken Dunham. Meanwhile, the Microsoft fix is available through the Windows Update and Automatic Updates tools as well as on Microsoft`s Web site.