Internet Security Source provides daily updates on Internet Threats, Viruses, Worms, Trojans, Spyware and Adware. Subscribe to our newsletter and receive daily updates on threats on the internet.
Microsoft Security Advisory (897663)
Monday, June 30 2008
Revision Note: Advisory published. Advisory Summary:Microsoft has received a report of an unexpected behavior in the way that the Windows Firewall User Interface handles malformed entries in the Windows Registry. By creating malformed Windows Firewall exception entries in the Windows Registry, an exception could be created in the firewall that would not be displayed in the Windows Firewall User Interface. However, this exception is displayed by the command line firewall administration tools. It is important to note that this is not a vulnerability. Administrative privileges are required to access the associated section of the Windows Registry that contains this configuration information. By using documented methods to manage and create Windows Firewall exceptions, it is unlikely that a malformed registry entry will be produced which would exhibit this behavior. It is more likely that an attacker who has already compromised the system would create such malformed registry entries with intent to confuse a user. Microsoft plans to include an update to address this concern as part of a future service pack on the affected supported platforms.Microsoft Security Advisory (921365)
Microsoft Security Advisory (943521)
Microsoft Security Advisory (922970)
Microsoft Security Advisory (937696)
Microsoft Security Advisory (914457)