An engineer at Google found a vulnerability around June 10th in Windows XP and went public with the information. The bug, still yet unpatched, potentially allows a user to download and install executable code to your local PC. Sure, like every other bug. This one, however, is one that Microsoft removed the disclosure from their website…which has opened a can of worms on the disclosure debate. Attackers have begun exploiting a zero-day vulnerability to target Windows XP machines. The vulnerability has given rise to renewed debate about responsible disclosure.
According to Sophos Senior Technology Consultant Graham Cluley, a legitimate Website pushing open-source software was seen serving the exploit to PC users. Cluley declined to name the site, but Microsoft confirmed that it was aware the bug was being exploited and said the exploits had been "taken down."
An analysis of the exploits found that Windows Server 2003 systems are not being targeted, according to an updated advisory. However, the vulnerability lies within the Windows Help and Support Center function delivered in both XP and Windows Server 2003, meaning that Windows Server 2003 systems could eventually be targeted.
To read the original eWeek article, click here:
Windows XP Zero-Day Targeted by Hackers in Drive-by Attack
Want an easy way to keep up with breaking tech news? And the Get DevSource headlines delivered to your desktop with RSS. 
