funsec mailing list archives
Duqu "fix"
From: "Rob, grandpa of Ryan, Trevor, Devon & Hannah" <rmslade () shaw ca>
Date: Mon, 7 Nov 2011 12:05:24 -0800
Duqu apparently uses a weakness in the (Windows) font parsing system as one of its entry points to a system. Microsoft is still working on a final patch. In the meantime, if you are concerned about it (and the danger level, at the moment, is fairly low), there is a temporary fix at http://support.microsoft.com/kb/2639658 Using the "Enable" button may cause problems with the way some applications use fonts. Caveat emptor. ====================== (quote inserted randomly by Pegasus Mailer) rslade () vcn bc ca slade () victoria tc ca rslade () computercrime org The heart has it's reasons, of which reason knows nothing. - Pascal victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links http://blogs.securiteam.com/index.php/archives/author/p1/ http://twitter.com/rslade _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- Duqu "fix" Rob, grandpa of Ryan, Trevor, Devon & Hannah (Nov 07)
- Re: Duqu "fix" Michal Zalewski (Nov 07)