MS warns of 'critical' Windows flaw

SEATTLE: Microsoft Corp. said that a critical flaw in most versions of its flagship Windows software could allow hackers to take control of a computer over the Internet to steal, delete and snoop on a user's data.

The flaw works by exploiting a tool that allows one computer to run programs on another computer over the Internet or over corporate networks, Microsoft said in a security bulletin.

Microsoft has promised to improve the security and reliability of its software 18 months ago in a memo issued by Chairman Bill Gates.

Microsoft said that a patch was available for that could be downloaded to fix the problem.

Computer security company Internet Security Systems Inc. issued a warning describing the flaw as an 'enormous threat and appropriate patches provided by Microsoft should be immediately applied.'

Users with security firewalls installed on their computers, which block such attacks, would normally be protected, ISS said.

The flaw exists in Windows NT, Windows 2000, Windows XP as well as Windows Server 2003, used to manage networked computers. Window Server 2003's launch in April of this year was the first major product introduction since Microsoft launched its Trustworthy Computing initiative.

© Reuters