Forest Global Training Partners

Cyber Risks · Krebs on Security

Warnings About Windows Exploit, pc Anywhere

Summary: Trend Micro reported malware exploiting a Windows media-file handling flaw that lets Windows XP, Vista, Windows Server 2003 and 2008 users get infected simply by browsing to a malicious site hosting a crafted media file. Separately, Symantec warned pcAnywhere users to patch or remove the tool after its 2006 source-code theft, released fixes for at least three vulnerabilities in pcAnywhere 12.5 for Windows, and said fewer than 50,000 people still use the product.

What you should know: Symantec's own white paper states that attackers holding the stolen source code have an increased ability to identify vulnerabilities and build new exploits, and it recommends disabling pcAnywhere until a final set of updates ships. A commenter notes the 50,000 figure likely counts only stand-alone users, since pcAnywhere also ships inside Altiris and Symantec backup products - meaning far more exposed installs than the number suggests.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related