Ryan Naraine blogged today "eEye spies new code-exection Windows hole" about a new high severity security hole found by eEye and reported to Microsoft on March 27. "The flaw "allows for remote execution of arbitrary code with minimal user interaction," eEye said in a barebones advisory." says Ryan's blog. This means that likely malware can be installed without the user having to click on a link.
The flaw apparently affects Windows 2000, XP and Windows 2003. If the security hole is confirmed by Microsoft, stay tuned for more news re a patch to fix this.
Guy
www.authenticationworld.com
guy.huntington@authenticationworld.com

del.icio.us