BugNet, the world's leading supplier of software bug fixes, exposed a Windows vulnerability that allows malicious users to rewrite a Windows registry, delete files or even wipe out a hard drive. The bug was originally demonstrated by security analyst Georgi Guninski and later validated by BugNet engineers. The bug originates in Microsoft's Component Object Model (COM) that is built into all Windows systems since Windows 95. COM objects rely on CLSID to uniquely identify a COM object and instruct the operating system how to execute it. Using the CLSID, dangerous executables and scripts can be disguised as innocuous .TXT files.
|