Windows vulnerability a feature claims Microsoft

MICROSOFT CLAIMED a hacker trick that allows an executable file to be launched when a user types a Web address into Internet Explorer is a feature rather than any security vulnerability.

But security boffins have warned that this particular 'trick' is unnecessary and expect it to be exploited by malware writers. ZD Net Australia quotes Michael Warrilow, of Hydrasight as saying that Volish "useful features" have been shown to result in security exposures that are ultimately exploited for malicious purposes. This will be no exception.

Another security expert James Turner of Frost and Allen said that he could imagine that malware writers could definitely exploit this feature particularly with a little social engineering.

But a spokesVole insisted that it was a feature that had legitimate users for customers.

He said it was important to clarify the difference between security problems and legitimate features. A feature allows someone to do something. A security hole helps an attacker do something they shouldn't be able to do. I trust we are all clear on that?

More here. µ