Microsoft has confirmed the existence of a vulnerability affecting the graphics rendering engine of some Windows operating systems.
The Redmond giant said it was working on a patch but that it was unlikely to be released separately as an emergency out-of-band update.
"We are not aware of any affected customers, nor of any active attacks targeting customers [using this vulnerability]," Microsoft's senior marketing communications manager for trustworthy computing Angela Gunn said.
The vulnerability was first disclosed at a security conference in South Korea last month, according to the SANS Technology Institute.
According to the Institute's Johannes Ullrich, the vulnerability affected all current versions of Windows, barring Windows 7 and 2008 R2.
"The vulnerability is exploited via malicious thumbnail images that may be attached to various documents (e.g. Microsoft Office documents)," Ullrich stated.
"The most likely exploit vector would use e-mail attachments. However, it is also possible to use network shares."
Copyright © iTnews.com.au . All rights reserved.
Issue: 334 | December 2014
Access CRN's extensive online resources including; email bulletins, community discussions and unique online news.
Processing registration... Please wait.
This process can take up to a minute to complete.
A confirmation email has been sent to your email address - SUPPLIED GOES EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can log on to the CRN website or start posting comments on articles.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain '@crn.com.au' to your white-listed senders.