Http Ms Iis Ntlm Asn1 Bo

[justleesa]

I received a few warnings from my security software that someone is trying to attack my computer - about 6 attacks since yesterday.

I searched the net and found that I should download the latest MS updates, I did and have now received two more attack notices.

Does anyone know what kind of attack this is (in plain English)? What can I do? What should I do? Do I have to be worried?

 

[JeffG]

I received a few warnings from my security software that someone is trying to attack my computer - about 6 attacks since yesterday.

I searched the net and found that I should download the latest MS updates, I did and have now received two more attack notices.

Does anyone know what kind of attack this is (in plain English)? What can I do? What should I do? Do I have to be worried?

Its a standard overflow error.

Basically, someone sends some malformed data to your PC. This data is meant to exploit a bug in the operating system and with all overflow exploits, it allows memory to be corrupted in such a way as to hide and execute code of the exploiters choice.

Now, if you applied the latest fixes from Microsoft you should be fine. Looking at the tech note for that exploit, it looks like the exploiting computer would have to be on the same network as your PC. (ie can't be exploited over the internet, unless you have zippo firewall protection)

 

[justleesa]

That is good to know! Thanks Jeff!