The security firm Sophos released a tool on Monday that it claimed will block any attacks trying to exploit the critical unpatched vulnerability in Windows' shortcut files.
The tool, dubbed "Sophos Windows Shortcut Exploit Protection Tool," will protect users until Microsoft releases a permanent patch for the problem, said Chet Wisniewski, a senior security advisor at Sophos.
"The tool replaces Windows' icon handler, so that anything that calls the handler, we're going to intercept," Wisniewski told Computerworld.
But Microsoft refused to condone the Sophos tool, a position it takes whenever third-party solutions to a Windows bug are introduced.
"Microsoft does not endorse third-party tools," said Jerry Bryant, group manager with the Microsoft Security Response Center (MSRC). "We recommend that customers apply the workaround in Security Advisory 2286198 , as it helps to protect customers from all known attack vectors."....
The Sophos Windows Shortcut Exploit Protection Tool works on Windows XP, Vista and Windows 7, but not on Windows 2000. It can be downloaded free-of-charge from the company's Web site.
________________________________________
The best solution to Windows vulnerabilities is to get a Mac.
John H. Armwood
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.