New Critical Security flaw found in Microsoft VM (most Windows systems)!

Question

New Critical Security flaw found in Microsoft VM (Virtual Machine)!

Answer

This question was answered on April 10, 2003. Much of the information contained herein may have changed since posting.

Microsoft Virtual Machine is shipped in most versions of Windows and Internet Explorer. Users of Microsoft VM should update their systems to patch this vulnerability immediately.

Microsoft encourages all customers to review the Security Bulletins to keep optimal security. The risk is considered ‘critical’ which is the highest security breach they have. The vulnerability allows the attacker to execute code of his or her choice after the victim is enticed to go to a specific web site.

An attacker could then host this malicious web page on a web site, or could send it to a user in e-mail. The vulnerability themselves provide no way to force a user to a web site.

Download locations for this patch:

The patches for all Windows systems are available via:

Windows Update

The complete technical details are posted at the Microsoft web site:

http://www.microsoft.com/technet/security/bulletin/ms03-011.asp

Author

Posted by Michal of Data Doctors on April 10, 2003