Microsoft has reportedly released an emergency patch for a critical flaw in the form of .ani animated cursor files in Windows.
Spurred by concern over the possibility of widespread exploitation of the flaw, Microsoft has released the emergency patch almost a week ahead of its monthly Patch Tuesday.
The update fixes seven separate Windows vulnerabilities, but treats the .ani flaw as ‘critical’. It qualifies as the third such emergency patch released by Microsoft since 2006.
According to Mark Miller, Director of Microsoft’s Security Response Center, while attacks based on the flaw are still “limited,” exploitation of the bug is following trends ’similar’ to the WMF (Windows Metafile) and VML (Vector Markup Language) vulnerabilities that were patched in the other two updates, which is alarming.
Miller said as of now, only Web-based exploitation has been seen by Microsoft, although there are indications that email too has been used as an exploitative tool by hackers.
Both Microsoft and security agencies strongly recommend Windows’ users to install the patch, as the .ani flaw could be used to exploit computers running virtually any version of Windows, including Vista, even if they are running non-Microsoft browsers such as Firefox and Opera.
All said, Ken Dunham, Director of Malicious Code Intelligence, iDefense, says the attacks are widespread, and that they have already identified over 400 different URLs related to the attacks plus multiple emails that have been sent out.
Going further, Dunham feels the .ani attack vector will probably be one of the most prevalent and persistent type of attack in the coming months.