Home > Electrical/Electronics > Computer (I.T) > Hackers Exploit Flaw In ALL Versions Of Windows That Lets Them Hijack User’s Computers –Microsoft

Hackers Exploit Flaw In ALL Versions Of Windows That Lets Them Hijack User’s Computers –Microsoft

Microsoft says that hackers are exploiting a vulnerability in all current versions of Windows that lets them hijack users’ computers — and there’s currently no fix.

The security flaw — which the tech firm has given its highest severity rating of ‘critical’ — emerges in the way that Windows handles and renders fonts.

Hackers can exploit the vulnerability by tricking users into opening a malicious document — or viewing it in Windows Preview.

This allows malware — like ransomware — to then be remotely launched onto the victim’s system.

Microsoft is aware of limited targeted attacks that could leverage un-patched vulnerabilities in the Adobe Type Manager Library,’ a spokesperson for the tech firm wrote in a security advisory published on the Microsoft website.

The vulnerabilities emerge, the firm explained, when the the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font — the Adobe Type 1 PostScript format.

‘There are multiple ways an attacker could exploit the vulnerability, such as convincing a user to open a specially crafted document or viewing it in the Windows Preview pane,’ added Microsoft.

WHICH OS VERSIONS ARE AFFECTED?

Windows 10

READ ALSO  Fast-Charging USB Products Can Expose Your Phones To Hackers

Windows 8.1

Windows RT 8.1

Windows Server 2019

Windows Server 2016

Windows Server 2012 R2

Windows Server 2012

Windows Server 2008

Windows 7

‘Microsoft is aware of this vulnerability and working on a fix,’ the security advisory continued.

‘Updates that address security vulnerabilities in Microsoft software are typically released on Update Tuesday, the second Tuesday of each month.

‘This predictable schedule allows for partner quality assurance and IT planning, which helps maintain the Windows ecosystem as a reliable, secure choice for our customers.’

The next patch Tuesday is scheduled to fall on April 14, 2020.

Although Microsoft has been known to issue security patches outside of the usual monthly schedule, a spokesperson told TechCrunch that the patch for the newly-identified vulnerability would likely  be released on patch Tuesday.

The security flaw — which the tech firm has given its highest severity rating of 'critical' — emerges in the way that Windows handles and renders fonts

The security flaw — which the tech firm has given a rating of 'critical' — emerges in the way that Windows handles and renders fonts. Hackers can exploit the vulnerability by tricking users into opening a malicious document — or viewing it in Windows Preview. This allows malware — like ransomware — to then be remotely launched onto the victim's system

The security flaw is also present in Windows 7, the version of Microsoft’s operating system that was released in 2009 and ceased to receive updates on January 14, 2020.

READ ALSO  India’s US$ 250bn Digital First Brands Opportunity

As a result, Only Windows 7 enterprise users with extended security support will receive  a patch for the  newly-identified weakness.

Source: Dailymail

 

Total Views: 46 ,
0
0

Leave a Reply

Your email address will not be published. Required fields are marked *