Major Microsoft security hole could cause disaster

By Derek Sooman on August 10, 2005, 8:28 PM
Marc Maiffret, chief hacking officer for eEye Digital Security, has warned that a major hole in Microsoft products could bring about the same kind of disaster as those that resulted in the Blaster and Sasser attacks. Maiffret expects hackers to quickly take advantage of the hole, and that a worm may be on its way as we speak.

He said that the hackers will win the race because they will publish an exploit in the next couple of days and a worm will hit the net soon after. He said that it was such a glaring bug, he didn’t know why anybody else hadn't discovered it.

The hole means that hackers can take over a computer using the operating system’s ‘plug and play’ hardware detection feature.

Fully updated versions of Windows Server 2003 and Windows XP are less vulnerable, but still could be affected by certain remote users or those within local systems, the company said.

User Comments: 4

Got something to say? Post a comment
cheesel said:
Shouldn't "Major Security Flaw in Windows" be a standing headline?
haroldma said:
Is this new "Major Security Flaw" something new and unusual for Microsoft? I think not...
brandnew427 said:
You said that right.
m4dxdpd said:
Funny, you just now found this out?...This has been an issue with Microsofts "Plug & Pray" for quite some time now, and there is already utilities out there to disable this function. :-)
Load all comments...

Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.