Microsoft Cautions XP Users on DirectX Zero-day Attack

Microsoft Cautions XP Users on DirectX Zero-day Attack

Microsoft has warned about Direct Zero-day attacks, which affect users of Windows 2000 Service Pack 4 (SP4), Windows XP and Windows Server 2003. A QuickTime media file is being used to launch the attacks, which are being spread through email or instant messages as an attachment or link.
In a security advisory, Microsoft stated, "After they click the link, they would be prompted to perform several actions. An attack could only occur after they performed these actions."

Microsoft's DirectX is the source of the exploit, wherein zero-day is found. The technology allows Windows to "perform client-side audio and video sourcing, manipulation and rendering."

Users of newer Microsoft operating systems like Windows Vista, Windows Server 2008 and Windows 7 are not affected with the attack. Microsoft claims it is currently processing a security update to fix the vulnerability.