Microsoft Investigates 'Moderately Critical' Windows XP Bug

• by Brandon Dimmel on 20100707 @ 10:29PM EST | google it | send to friends
• Filed under Business | Microsoft | (related terms: windows xp, secunia, microsoft, security, bug)

Microsoft is currently investigating the emergence of a new critical bug affecting users of Windows 2000 and Windows XP. The Redmond-based firm made the announcement via Twitter on Tuesday, and says the issue can be found in the dynamic link library (.DLL) file "mfc42.dll."

Security firm Secunia posted a detailed report, which they say is based on a third party proof-of-concept exploit. It's suggested that the vulnerability can be exploited via PowerZip version 7.2 Build 4010, among other utilities that use the mfc42.dll file. (Source: pcmag.com)

Bug Affects Moderately Popular Component

The mfc42.dll file is a component in Microsoft Foundation Classes and a C++ application framework. It's not as popular as it once was, but remains useful enough to cause serious problems. Microsoft has for some time encouraged developers to seek alternatives to mfc42.dll.

The bug, which is related to a boundary error, can eventually result in a stack-based buffer overflow, says Secunia. What average users of Windows XP and Windows 2000 need to know is that this overflow can compromise the security of their machines.

Secunia: Issue "Moderately Critical"

Secunia says the vulnerability could allow malicious code to be executed if exploited properly, and in considering this the security firm has deemed the issue "moderately critical." (Source: cnet.com)

Although Windows XP and 2000 are confirmed affected by the bug, Secunia hasn't ruled out the possibility that other Microsoft operating systems could be vulnerable, too. However, it's more than likely that security updates added to Windows Vista and Windows 7 would block an attempt to exploit the flaw.

"Microsoft is investigating new public claims of a possible vulnerability in Windows 2000 and Windows XP," said company group manager Jerry Bryant, who said he's unaware of any attempts to exploit the code in order to launch an attack.

Free guide: Windows 8 Cheat Sheet: Touch and Mouse Gestures. Windows 8 brings a revolutionary way to use your mouse, touchpad, and touchscreen using 'gestures'. If you're new to gestures, you'll most certainly find them confusing - especially if you don't mean to invoke a gesture in the first place! That said, gestures are widely used on mobile and touch-based devices, and the technology is here to stay. Gestures can be a huge time-saver (similar to keyboard shortcuts) once you understand how to use them. For example, you can use gestures to move objects from one location to the next, zoom in, zoom out, enter passwords, and similar. This Windows 8 gesture cheat sheet is designed to make your life easier by demonstrating and explaining the basics. Print, share, and enjoy! Click here to download this guide now! Note: this guide is free, but registration is required; after that, you can select more ebooks and videos for download without registering again. If you have questions / problems with the registration form, please read this.