{"id":10585,"date":"2010-03-03T04:40:00","date_gmt":"2010-03-03T04:40:00","guid":{"rendered":"http:\/\/euvolution.com\/futurist-transhuman-news-blog\/the-windows-xp-f1-bug-hijacking-computers-one-help-menu-at-a-time-security\/"},"modified":"2010-03-03T04:40:00","modified_gmt":"2010-03-03T04:40:00","slug":"the-windows-xp-f1-bug-hijacking-computers-one-help-menu-at-a-time-security","status":"publish","type":"post","link":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/futurist\/the-windows-xp-f1-bug-hijacking-computers-one-help-menu-at-a-time-security.php","title":{"rendered":"The Windows XP F1 Bug: Hijacking Computers One Help Menu At A Time [Security]"},"content":{"rendered":"<p><img decoding=\"async\" src=\"http:\/\/euvolution.com\/futurist-transhuman-news-blog\/wp-content\/plugins\/wp-o-matic\/cache\/ce800_500x_533180778_cb919b0416.jpg\" class=\"left image500\" width=\"500\" style=\"padding-left:10px; padding-right: 10px;\">So there's this tiny unpatched bug in VBScript that lets sneaky websites run malicious code on machines running <a title=\"Click here to read more posts tagged #internetexplorer\" href=\"http:\/\/gizmodo.com\/tag\/internetexplorer\/\">Internet Explorer<\/a> on <a title=\"Click here to read more posts tagged #windowsxp\" href=\"http:\/\/gizmodo.com\/tag\/windowsxp\/\">Windows XP<\/a>. It's triggered when you try to access the help menu by hitting the F1 key. Whoops.<\/p><p>According to a recent Microsoft security advisory:<\/p><blockquote><p>The vulnerability exists in the way that VBScript interacts with Windows Help files when using Internet Explorer. If a malicious Web site displayed a specially crafted dialog box and a user pressed the F1 key, arbitrary code could be executed in the security context of the currently logged-on user.<\/p><\/blockquote><p>This means that all someone with ill intentions needs to do is create a website which has a somewhat convincing popup prompt to coax you into hitting F1. And tada! You've allowed him or her to run some kind of code on your machine.<\/p><p>It'll be a while before a patch is available for this bug, but in the meantime Microsoft suggests that you protect yourself by not pressing the F1 key if a Web site tells you to. [<a href=\"http:\/\/www.microsoft.com\/technet\/security\/advisory\/981169.mspx\">Microsoft<\/a> via <a href=\"http:\/\/www.computerworld.com\/s\/article\/9164038\/Microsoft_Don_t_press_F1_key_in_Windows_XP\">Computer World<\/a> via <a href=\"http:\/\/tech.slashdot.org\/story\/10\/03\/02\/1924237\/Microsoft-Says-Dont-Press-the-F1-Key-In-XP?from=rss&amp;utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\">Slashdot<\/a>]<\/p><p><i>Picture by <a href=\"http:\/\/www.flickr.com\/photos\/karlalvin\/533180778\/\">Karl Alvin<\/a><\/i><\/p><p><a href=\"http:\/\/ads.pheedo.com\/click.phdo?s=21b8033c58188a22c8d3f138ad93e309&amp;p=1\"><img decoding=\"async\" alt=\"\" style=\"padding-left:10px; padding-right: 10px;\" border=\"0\" src=\"http:\/\/euvolution.com\/futurist-transhuman-news-blog\/wp-content\/plugins\/wp-o-matic\/cache\/ce800_img.phdo?s=21b8033c58188a22c8d3f138ad93e309&amp;p=1\"><\/a><br><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"0\" width=\"0\" border=\"0\" src=\"http:\/\/euvolution.com\/futurist-transhuman-news-blog\/wp-content\/plugins\/wp-o-matic\/cache\/e3dbf_eus.gif?eui=2226\" style=\"padding-left:10px; padding-right: 10px;\"><\/p><div><a href=\"http:\/\/feeds.gawker.com\/~ff\/gizmodo\/full?a=qUC8YvLYovM:vxs-Mn01BOg:H0mrP-F8Qgo\"><img decoding=\"async\" src=\"http:\/\/euvolution.com\/futurist-transhuman-news-blog\/wp-content\/plugins\/wp-o-matic\/cache\/e3dbf_full?d=H0mrP-F8Qgo\" border=\"0\" style=\"padding-left:10px; padding-right: 10px;\"><\/a> <a href=\"http:\/\/feeds.gawker.com\/~ff\/gizmodo\/full?a=qUC8YvLYovM:vxs-Mn01BOg:yIl2AUoC8zA\"><img decoding=\"async\" src=\"http:\/\/euvolution.com\/futurist-transhuman-news-blog\/wp-content\/plugins\/wp-o-matic\/cache\/7c933_full?d=yIl2AUoC8zA\" border=\"0\" style=\"padding-left:10px; padding-right: 10px;\"><\/a> <a href=\"http:\/\/feeds.gawker.com\/~ff\/gizmodo\/full?a=qUC8YvLYovM:vxs-Mn01BOg:D7DqB2pKExk\"><img decoding=\"async\" src=\"http:\/\/euvolution.com\/futurist-transhuman-news-blog\/wp-content\/plugins\/wp-o-matic\/cache\/7c933_full?i=qUC8YvLYovM:vxs-Mn01BOg:D7DqB2pKExk\" border=\"0\" style=\"padding-left:10px; padding-right: 10px;\"><\/a> <a href=\"http:\/\/feeds.gawker.com\/~ff\/gizmodo\/full?a=qUC8YvLYovM:vxs-Mn01BOg:V_sGLiPBpWU\"><img decoding=\"async\" src=\"http:\/\/euvolution.com\/futurist-transhuman-news-blog\/wp-content\/plugins\/wp-o-matic\/cache\/7c933_full?i=qUC8YvLYovM:vxs-Mn01BOg:V_sGLiPBpWU\" border=\"0\" style=\"padding-left:10px; padding-right: 10px;\"><\/a><\/div><p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/euvolution.com\/futurist-transhuman-news-blog\/wp-content\/plugins\/wp-o-matic\/cache\/7c933_qUC8YvLYovM\" height=\"1\" width=\"1\" style=\"padding-left:10px; padding-right: 10px;\"><\/p>","protected":false},"excerpt":{"rendered":"<p>So there's this tiny unpatched bug in VBScript that lets sneaky websites run malicious code on machines running Internet Explorer on Windows XP. It's triggered when you try to access the help menu by hitting the F1 key. Whoops.According to &hellip; <a href=\"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/futurist\/the-windows-xp-f1-bug-hijacking-computers-one-help-menu-at-a-time-security.php\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"limit_modified_date":"","last_modified_date":"","_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[10],"tags":[],"class_list":["post-10585","post","type-post","status-publish","format-standard","hentry","category-futurist"],"modified_by":null,"_links":{"self":[{"href":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/wp-json\/wp\/v2\/posts\/10585"}],"collection":[{"href":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/wp-json\/wp\/v2\/comments?post=10585"}],"version-history":[{"count":0,"href":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/wp-json\/wp\/v2\/posts\/10585\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/wp-json\/wp\/v2\/media?parent=10585"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/wp-json\/wp\/v2\/categories?post=10585"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.euvolution.com\/futurist-transhuman-news-blog\/wp-json\/wp\/v2\/tags?post=10585"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}