Duqu apparently uses a weakness in the (Windows) font parsing system as one of its entry points to a system. Microsoft is still working on a final patch.
In the meantime, if you are concerned about it (and the danger level, at the moment, is fairly low), there is a temporary fix at http://support.microsoft.com/kb/2639658 Using the "Enable" button may cause problems with the way some applications use fonts. Caveat emptor. ====================== (quote inserted randomly by Pegasus Mailer) [email protected] [email protected] [email protected] The heart has it's reasons, of which reason knows nothing. - Pascal victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links http://blogs.securiteam.com/index.php/archives/author/p1/ http://twitter.com/rslade _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
