Home › Community › Security Blog

Security Blog

 

New Microsoft Help and Support Center Vulnerability Discovered

Posted By Netgear Threat Lab at 2:05 PM, June 30, 2010

On June 10th, security researcher Tavis Ormandy discovered and released to the public details on a new vulnerability in the Microsoft Windows Help Center. We have since found a lot of new malware trying to take advantage of this loophole.

HCP is a protocol similar to HTTP. It can use a URL to open documents wthin Windows Help and Support Center. Help and Support Center (HSC) is the built-in help function of Windows which provides users with the ability to download and install software updates and other help documents. Internet Explorer by default can use the protocol to open the Help and Support Center.

In this case, if the user opens a Web page which exploits the HCP vulnerability, hidden malicious scripts automatically run and attempt to infiltrate the system.

Another way malicious attackers attack is embedding the HCP exploit code into a number of advanced audio formats files. When the user opens the audio stream file, the operating system also will be subject to malicious intrusions.

As this vulnerability was announced recently, there is no existing patch yet. We recommend users to temporarily shut down the HCP related functions manually until a patch is released.

Posted by: Netgear Threat Lab at 2:05 PM
Categories: Netgear Threat Lab

No TrackBacks

TrackBack URL: http://prosecure.netgear.com/cgi-bin/mt/mt-tb.cgi/97

Comments