TechSpot

Flaw in Windows Script May Allow Code to Run

By TS | Thomas
Mar 19, 2003
  1. An attacker may exploit a vulnerability in Windows Script Engine by constructing a Web page that, when visited by a user, runs code of the attacker’s choice with user credentials. The attacker can host the Web page on a Web site or send the page directly to the user by e-mail.

    Affected Software;
    Windows XP
    Windows 2000
    Windows NT 4.0, Windows NT 4.0 Terminal Server Edition
    Windows Millennium Edition
    Windows 98 Second Edition & Windows 98

    Download Patch now from Microsoft.
     
  2. poertner_1274

    poertner_1274 secroF laicepS topShceT Posts: 4,172

    Why does this not surprise me?
     
  3. negroplasty

    negroplasty TS Guru Posts: 516   +12

    I can understand the flaws in previous versions of Windows, but I never would have expected something like this to be overlooked in XP. How can Microsoft miss something like this? Thomas, do you have any ideas as to what we could do to prevent this happening to our computers? Hopefully Microsoft will release a patch for this soon, so I am not too worried, but it's better to be safe than sorry :grinthumb .
     
  4. poertner_1274

    poertner_1274 secroF laicepS topShceT Posts: 4,172

    Check that link :D
     
  5. warr

    warr TS Rookie Posts: 67

    why?

    because you put too much trust in crappy win XP. just name change from 2000 to XP, and that shakes your *** more than ever. :haha:
     
  6. negroplasty

    negroplasty TS Guru Posts: 516   +12

    My apologies, I did not see that patch link there ;) . warr, yes, I do put a lot of trust into XP as it has never failed me before. Maybe the odd problems here and there, but nothing a patch can't fix. Longhorn should be an improvement.
     
  7. warr

    warr TS Rookie Posts: 67

    always wait for Service Pack 1. :haha:
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...