Acer 'preloads vulns' onto notebooks
Print storyRipe for exploitation
Posted in Software & Security, 10th January 2007 18:49 GMT
Free whitepaper – Essential archive requirements for eDiscovery
Acer has been called out for pre-loading a vulnerability on its notebooks.
A library file, called LunchApp.ocx, on the devices is set up to turn on the "safe for scripting" feature that means users are more vulnerable to ActiveX exploits. The "feature," designed to make it easier to browser Acer's site means systems can download potentially malicious Active X controls, without warning, if they happen to stray onto websites controlled by hackers.
This reduction in security defences was uncovered by security researchers at anti-virus firm F-Secure during testing of the LunchApp.ocx library, as explained here.
Acer is yet to respond to our requests for comment. ®
Free whitepaper – Five essential considerations for Exchange 2007 implementations
The future of SaaS and IT infrastructure management
The mandate for application security
Extended Validation SSL Certificates
Avoiding 7 common mistakes of IT security compliance
Sign up, sign up for The Register IT security newsletter
Former top Sun exec mourns end of a franchise
Win an HTC Touch Diamond2!
Disties braced for autumn reseller collapses