Microsoft warns of two new critical security flaws

Software giant Microsoft has warned Windows customers of two critical security flaws which could allows hackers to take control of affected computers.

The company has urged computer users to download and install fixes to the problems, which mainly affect Windows XP software, by visiting www.microsoft.com/security.

The first vulnerability targets the Windows HTML Help Control and has already been exploited using the Phel trojan, according to anti-virus firm F-Secure.

Phel, an anagram for help, can be used to remotely control computer user's systems, even when Windows XP Service Pack 2 is installed.

The second critical vulnerability infects the Windows' icon and cursor handling function using a web page and can allow hackers to take control of a PC, install new software and view, change and delete data.

Today Microsoft also started offering new monthly software to remove malicious code - such as viruses, torjans and backdoors - from user's systems.

Last week Microsoft began offering an anti-spyware product to block and remove pop-ups, adware and other code which secretly records computer user information and activities.

What do you think? Email feedback@computing.co.uk

If you want to be first with the news, visit Computing every day.