We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

New MyDoom variant exploits IE flaw

Those without firewalls or SP2 at particular risk

A new variant of the MyDoom worm that exploits an unpatched flaw in Microsoft's Internet Explorer (IE) browser is in circulation, posing particular risk to home and small business users, security experts warned this week.

The worm, which security firms dubbed MyDoom.AF, MyDoom.AH and MyDoom.AG, spreads by email and exploits a recently discovered buffer overflow vulnerability in IE.

Internet users should avoid opening suspicious email with the subject headers "funny photos :)," "hello," "hey!" and blank headers, according to security firm iDefense. Users who open the infected email and click on links in the message body will be directed to destinations from which an attack may be launched.

Microsoft issued a statement saying that it was aware of the new variant and an investigation is underway. According to early reports the vulnerability does not exist on Windows XP Service Pack 2 (SP2) so customers running the security update are at a reduced risk of the threat, Microsoft said. The software maker and security experts advised users to install SP2 if they have not already.

Users less likely to have a perimeter defense, such as those in homes and small offices, are more vulnerable to attack, security experts warned. The variant exploits a flaw in the way IE handles "iframe" and "frame" HTML tags.

Code that takes advantage of the flaw began circulating last week and researchers warned that several new codes exploiting the vulnerability may appear in the next few weeks since it is still unpatched.

Microsoft said however that it believes the current threat is low and that it is not aware of any significant customer impact. The company added that it will decide what further action to take upon completing its investigation and said it could issue a patch ahead of its regular monthly security update.


IDG UK Sites

Windows 9 launch event live: Windows 9 launch live blog - find out first as the new Windows is...

IDG UK Sites

Windows 9 and the death of the OS as a must-have product

IDG UK Sites

Video trends: 4K is here โ€“ HDR video, VR and 3D audio is coming

IDG UK Sites

Best iPhone 6, iPhone 6 Plus deals: iPhone 6, iPhone 6 Plus tariffs, contracts and prices UK