News: Exploit-for-sale hacker pins bug on Vista's e-mail app

[Shawn]

A just-disclosed bug in Windows Vista's built-in e-mail program can be
used by hackers to run malicious code on a victimized PC, said a
researcher Friday who two weeks ago touted an exploit-for-sale
service.

Microsoft acknowledged the report, and said it is investigating the
vulnerability.

Symantec's DeepSight network, which issued a warning about the
vulnerability in Windows Mail early this morning, upped the threat
rating from 6.8 to 7.5 in a follow-up alert after it confirmed that
the bug was remote code exploitable. That means an attacker could
introduce his or her own malware onto a compromised computer. Windows
Mail is the successor to Outlook Express, the entry-level e-mail app
that's been bundled with the operating system since the Windows 95
edition.

Full story here:
http://www.snpx.com/cgi-bin/news55.cgi?target=195827528?-2622

Shawn