Visitors Now: | |
Total Visits: | |
Total Stories: |
Story Views | |
Now: | |
Last Hour: | |
Last 24 Hours: | |
Total: |
Microsoft has issued a security advisory against fears of PC hijacking or hacking through its Windows' dynamic-link library (DLL) and offered a tool to ward of such attack.
The company said Wednesday that enterprises can use the tool to block one or any application from loading DLLs from organization networks, websites and USB drives.
The tool is not available in the company's Automatic Updates service. Instead, it can be downloaded through Windows version-specific links in a just-published support document.
The tool can be downloaded using Windows version-specific links in a just-published support document.Monday's security advisory was its first public reaction to a wave of reports from researchers that developers have left a large number of Windows programs open to attack.
Many Windows applications don't call code libraries — dubbed "dynamic-link library," or "DLL" — using the full pathname, but instead use only the file name, giving hackers wiggle room. Criminals can exploit that by tricking the application into loading a malicious file with the same name as the required DLL. The result: Hackers can hijack the PC and plant malware on the machine.
More here www.computerworld.com/s/article/9181518/Microsoft_releases_tool_to_block_DLL_load_hijacking_attacks