Kaspersky Lab is warning of a potentially dangerous Windows vulnerability. The security specialist therefore advises all users to install Windows operating-system update MS08-067 immediately. Microsoft previously announced the release of the urgent update for users of Windows 2000, XP, Vista and Server 2003/2008. Windows 2000, XP and Server 2003 are said to be particularly affected. The update is intended to counter both a wave of worms expected within days and an increase in hacker attacks.
The Trojan-Spy.Win32.Gimmiv.a malware is already spreading through this vulnerability and was added to Kaspersky Lab’s virus database on 24 October. The Trojan belongs to the spyware family and steals passwords. Kaspersky Lab’s virus specialists have already analysed it in detail and traced it to China.
The release of an emergency update patch is rare—the previous such update appeared in spring 2007. According to Kaspersky Lab, the current vulnerability resembles the one that led to a major malware epidemic involving worms such as LoveSan, Sasser and Rbot between 2003 and 2004.
The Microsoft security update can be installed using the following link:
http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
