Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Bob or post in the Forum.

« The Command Prompt Remains The Same | Main | Vista Application Compatibility Technologies »

Vista Windows Mail Vulnerability

Recently there is reported to be a new vulnerability to Windows Vista Mail exposed. Supposedly, if you click a link in an email, an attacker could execute any executable file in a folder with the same name. So if you had a folder named c:\temp and a batch file at the same level named c:\temp.bat, you could click on the link to the folder and actually have the batch file launched without asking.

In my opinion, It is not as big a deal as the reports make it. However, it does illustrate once again that you must always be very careful about what you click on in an email. Naturally if there is an attachment you should be very wary, but even links can get you in trouble. If by some remote chance you get a spam mail you are interested in-- still refrain from clicking a link. If it is fake watches you are interested, in, let the annoying spam mail be a trigger to typing "fake watches" into Google (or eBay) but never click a link. Often links will track that you clicked the link thereby labeling you a sucker to be hit up for future such trash.

Microsoft has not yet acknowledged this particular reported vulnerability. But forget the specific nature of this potential attack and simply never click on emails from business you do not do business with. An exception-- banks. I would suggest never clicking on a link from a bank that you do not expect (like a transaction notification for which you signed up). A bank will never contact you via email about the security of your account!

Library Resources

line
line

Bob Kelly's Bio:

Bob Kelly is the founder of AppDeploy.com — a resource focused on desktop management products and practices. He is author of the Start to Finish Guide to Scripting with KiXtart and The Definitive Guide to Windows Desktop Administration. He is also president and co-founder of iTripoli, Inc. who provide AdminScriptEditor.com, home to an integrated suite of scripting tools and a shared library of scripts and language help. Not enough? For more on Bob click here.