Microsoft Windows Operating System Users Experience Security Vulnerability Threat
Monday, January 23, 2006
In late December 2005, people were given warning about an unwanted holiday gift that could be presented to their computer, and in early January 2006, the development of a patch for the discovered security vulnerability in Microsoft Windows that "hackers" were taking advantage of, was in the making. Because Microsoft Windows is the most widely used operating system, this security threat has caught a great deal of attention from all business people alike.
The flaw discovered is found in Windows graphics files, known as Windows Meta Files (WMF). The vicious file can even be disguised to the eye as a .jpg graphic file. Infected files can be found in email, viewed on web site pages, downloaded from a page, or even via a contaminated graphic message on instant messenger. When a tainted graphic or image is viewed, a process of coding takes place immediately without the user's knowledge. A mock spyware/antivirus application is dropped onto the system by the exploit using a distorted Windows Meta File. Because of its exposure while conducting normal web based activities, it has been treated as a serious threat to security.
A patch has been released by Microsoft to protect users from infection. It can be accessed on Microsoft's home page. Windows users who use the "automatic update" function need not worry about downloading the patch, as it has been downloaded to your system automatically. Thus far, the problem has been contained for the most part; however, monitoring is taking place so it doesn't fire up and quickly spread across the Internet.
Creating a patch is a complex process because there are many versions of Windows, and sometimes even the most compatible patch has the possibility of interfering with other computer components.
Even with the recommended patch, one cannot afford to ignore issues of security because there are still hackers waiting to be the next to cause havoc to computer and Internet users alike. This will require a new patch. Everyone that has been infected has not received the patch, therefore, the vulnerability and spread of this particular security flaw is still very real and alive.
If you do become infected with this particular harmful file, there are steps to take to remove the exploit and return back to normal work routine.
As it stands, this isn't the first security threat ever to happen, and it won't be the last. It serves as a reminder to all about the importance of protecting our computer systems.
