US-CERT Warns of AutoRun Flaw in Windows

US-CERT's National Cyber Alert System is warning that Microsoft Windows' AutoRun feature is affected with security vulnerabilities. AutoRun is the functionality that enables programs to run automatically when portable devices are inserted into the system.

Security researchers said that it is not difficult to find how AutoRun might lead to exploitations. Numerous malware try to propagate themselves by designing AutoRun files for various drives, particularly USB drives. They (malware) run automatically when the USB stick is plugged into another system.

However, Windows operating system includes utilities to disable AutoRun that effectively helps in blocking the spread of malware. But, according to US-CERT, Microsoft's g...

» SPAMfighter News - 1/28/2009