A software glitch with Windows XP, Microsoft's new flagship operating system, leaves users in unprecedented danger according to the company's own security experts. Some older versions of Windows may also be affected.
據(jù)微軟公司安全問題安全專家介紹,新王牌操作系統(tǒng)即視窗XP有軟件缺陷,該缺陷可使用戶處于空前的危險。一些舊版的視窗也可能受到影響。
The hole is in a service called Universal Plug and Play, which comes as standard with Windows XP. The bug allows a malicious hacker to gain complete control over a computer. UPnP is intended to allow a PC to control a broad range of hardware, including the latest home appliances. UPnP can also be added to Windows 98, 98SE and ME.
該漏洞在一種叫作“通用即插即用”的服務(wù)功能上,它符合視窗XP的標(biāo)準(zhǔn)。該缺陷可使惡意的黑客完全控制安裝此軟件的計算機(jī)。開發(fā)“通用即插即用”的功能是為了能使計算機(jī)控制多種硬件,包括最新的家庭用電器。該軟件還可以添置到視窗98、98SE和ME上。
Microsoft representatives say that the fault poses an unprecedented risk because a user is vulnerable as soon as they connect to the internet - no other action is required. The company has recommended that all users running UPnP download and install a new patch immediately.
微軟代表說,因為不需采取其它行動,只要該軟件用戶聯(lián)到因特網(wǎng)上就可能受害,所以該缺陷造成的危險是空前未有的。所有使用這種“通用即插即用”的用戶應(yīng)立即下載和安裝一種新的修正軟件。
Microsoft touted Windows XP as its most secure operating system ever when the software was launched worldwide on 25 October. The company estimates that it has sold over seven million copies of the platform since then.
微軟曾揚(yáng)言視窗XP是它最安全的操作系統(tǒng),自從10月25日在全世界推出該軟件后,該公司估計已售出700多萬套。
Spokesman Jim Desler said: "We are in the process of notifying our customers. We have mobilized all of our technical account managers worldwide who work with big clients and we have a very broad email list for email notification."
公司發(fā)言人Jim Desler說:“我們正在通知我們的客戶,我們已經(jīng)動員了公司遍布全世界為大客戶服務(wù)的技術(shù)項目經(jīng)理,還對大量的電子郵件地址名單發(fā)出了電子郵件通知。”
There are two sides to the UPnP flaw. The first could allow the hacker to break into a Windows system and run any programs or code they choose by sending a specially designed network message.
“通用即插即用”的缺陷有兩個方面。一是可能允許黑客用輸入一種特別編制的網(wǎng)絡(luò)信息,闖入一種視窗系統(tǒng),操縱全部程序或由他們?nèi)我饩幋a。
The second might enable the hacker to overload a Windows machine and prevent it from functioning properly. This can be achieved by sending similarly customised network messages repeatedly.
其二是黑客可以讓裝有視窗的電腦超載,使該機(jī)功能失常,用反復(fù)輸入類似定制網(wǎng)絡(luò)信息的方法就可達(dá)此目的。
The hole was discovered by Riley Hassell of US security company eEye Digital Security. In his advisory, Hassell hints that there may be further problems with the UPnP service.
該缺陷是由美國eEye數(shù)字安全公司的Riley Hassell發(fā)現(xiàn)的。在他的報告中,他暗示“通用即插即用”可能還有更多的問題。
The US government-sponsored computer monitoring service, the Computer Emergency Response Team has also issued an open warning to computer users about the problem.
美國政府資助的計算機(jī)監(jiān)測部門即計算機(jī)應(yīng)急小組也已發(fā)出公開警告,告誡計算機(jī)用戶關(guān)注這一問題。
據(jù)微軟公司安全問題安全專家介紹,新王牌操作系統(tǒng)即視窗XP有軟件缺陷,該缺陷可使用戶處于空前的危險。一些舊版的視窗也可能受到影響。
The hole is in a service called Universal Plug and Play, which comes as standard with Windows XP. The bug allows a malicious hacker to gain complete control over a computer. UPnP is intended to allow a PC to control a broad range of hardware, including the latest home appliances. UPnP can also be added to Windows 98, 98SE and ME.
該漏洞在一種叫作“通用即插即用”的服務(wù)功能上,它符合視窗XP的標(biāo)準(zhǔn)。該缺陷可使惡意的黑客完全控制安裝此軟件的計算機(jī)。開發(fā)“通用即插即用”的功能是為了能使計算機(jī)控制多種硬件,包括最新的家庭用電器。該軟件還可以添置到視窗98、98SE和ME上。
Microsoft representatives say that the fault poses an unprecedented risk because a user is vulnerable as soon as they connect to the internet - no other action is required. The company has recommended that all users running UPnP download and install a new patch immediately.
微軟代表說,因為不需采取其它行動,只要該軟件用戶聯(lián)到因特網(wǎng)上就可能受害,所以該缺陷造成的危險是空前未有的。所有使用這種“通用即插即用”的用戶應(yīng)立即下載和安裝一種新的修正軟件。
Microsoft touted Windows XP as its most secure operating system ever when the software was launched worldwide on 25 October. The company estimates that it has sold over seven million copies of the platform since then.
微軟曾揚(yáng)言視窗XP是它最安全的操作系統(tǒng),自從10月25日在全世界推出該軟件后,該公司估計已售出700多萬套。
Spokesman Jim Desler said: "We are in the process of notifying our customers. We have mobilized all of our technical account managers worldwide who work with big clients and we have a very broad email list for email notification."
公司發(fā)言人Jim Desler說:“我們正在通知我們的客戶,我們已經(jīng)動員了公司遍布全世界為大客戶服務(wù)的技術(shù)項目經(jīng)理,還對大量的電子郵件地址名單發(fā)出了電子郵件通知。”
There are two sides to the UPnP flaw. The first could allow the hacker to break into a Windows system and run any programs or code they choose by sending a specially designed network message.
“通用即插即用”的缺陷有兩個方面。一是可能允許黑客用輸入一種特別編制的網(wǎng)絡(luò)信息,闖入一種視窗系統(tǒng),操縱全部程序或由他們?nèi)我饩幋a。
The second might enable the hacker to overload a Windows machine and prevent it from functioning properly. This can be achieved by sending similarly customised network messages repeatedly.
其二是黑客可以讓裝有視窗的電腦超載,使該機(jī)功能失常,用反復(fù)輸入類似定制網(wǎng)絡(luò)信息的方法就可達(dá)此目的。
The hole was discovered by Riley Hassell of US security company eEye Digital Security. In his advisory, Hassell hints that there may be further problems with the UPnP service.
該缺陷是由美國eEye數(shù)字安全公司的Riley Hassell發(fā)現(xiàn)的。在他的報告中,他暗示“通用即插即用”可能還有更多的問題。
The US government-sponsored computer monitoring service, the Computer Emergency Response Team has also issued an open warning to computer users about the problem.
美國政府資助的計算機(jī)監(jiān)測部門即計算機(jī)應(yīng)急小組也已發(fā)出公開警告,告誡計算機(jī)用戶關(guān)注這一問題。