Thread: Vulnerability in Windows Mail

Perhaps a vulnerability in Windows Mail could allow an attacker to run a program on a computer with Vista.

The cracker can send a malicious e-mail link which, when clicked, without any obstacles and warnings, the program will be run. According to the description of the problem, published on Friday in the popular mail-sheet security vulnerability called "full discovery." Windows Mail is the successor to Outlook Express, available free from Microsoft mail client that shipped with Windows Vista.

A representative from differences Representative X Net News by e-mail that Microsoft is investigating this problem. "A user should always be extremely careful clicking on links in messages, especially sent an unknown sender" - spokesman said.

The threat to users directly Vista depends on what lies behind the link, said Dave Marcus (Dave Marcus), a researcher and security manager for McAfee Communications. "Theoretically, q atakuyuschi can do anything that he can execute any command" - he continued.

However, the risk is not so great, because Vista is not a widely used operating system for the time being. "I do not think that there will be many attacks, if only because Vista is not the most popular operating system now. Hopefully, Microsoft will take this issue seriously, and will shortly issue an updated" - Marcus said.



Vista became available to consumers in late January. Since then, Microsoft has released a security update to fix a critical vulnerability in Windows Defender security scanner built into the operating system antispyware.

"Microsoft is not aware of any attacks using the new vulnerability in Windows Mail. Upon completion of the investigation is likely to be issued updated security" - a company representative said.