Steve "I'm the best in the business" Gibson has released a fix for the uplddrvinfo.htm "lets basically ANYONE delete whatever files they wany on ANY Windows XP box on the planet" bug.I'll leave it to Steve to introduce this "FIX"...
- XPdite only needs to be run once on any Windows XP system. The system will subsequently be protected from this vulnerablity.
Simply download and run the 30 kbyte XPdite utility. That's all there is to it. XPdite will display the current condition of your system and, if nesessary, provide the option of updating one crucial file to instantly eliminate future danger. You may then either keep XPdite around for periodic (but probably unnecessary) check-ups, or to provide to your friends and associates.
Whatever you do, PLEASE pass the word to everyone you know who is also using Windows XP. We have no reports yet of any actual exploitation of this critical defect, but now that news of this vulnerability is widespread, the entire security industry will be surprised if such reports do not begin surfacing shortly.
News source: XPdite - Quickly replace a dangerous Windows XP file (12th Sept 2002)
Download: XPdite.exe (30k)
View: Shane Hird's Bugtraq posting - 16th August 2002 - MSRC 1198dg
Video: TechTV - The ScreenSavers - Actual video Footage of problem, Leo demonstrates!
