The technique uses a feature of Windows intended to let network administrators notify their customers of critical maintenance issues such as server downtime or schedule backups. The text-only messages pop up in a dialog box on top of any other window being used at the time. The vulnerability affects Windows 95, 98, NT, 2000 and XP.
|