funsec mailing list archives

Duqu "fix"


From: "Rob, grandpa of Ryan, Trevor, Devon & Hannah" <rmslade () shaw ca>
Date: Mon, 7 Nov 2011 12:05:24 -0800

Duqu apparently uses a weakness in the (Windows) font parsing system as one of 
its entry points to a system.  Microsoft is still working on a final patch.

In the meantime, if you are concerned about it (and the danger level, at the 
moment, is fairly low), there is a temporary fix at 
http://support.microsoft.com/kb/2639658

Using the "Enable" button may cause problems with the way some applications use 
fonts.

Caveat emptor.

======================  (quote inserted randomly by Pegasus Mailer)
rslade () vcn bc ca     slade () victoria tc ca     rslade () computercrime org
The heart has it's reasons, of which reason knows nothing.  - Pascal
victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
http://blogs.securiteam.com/index.php/archives/author/p1/
http://twitter.com/rslade
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: