Internet Users Warned of Serious Computer Security Hole

Microsoft Corp. has taken the rare step of warning about a serious computer security vulnerability it hasn't fixed yet.

The vulnerability disclosed Monday affects Internet Explorer users whose computers run the Windows XP or Windows Server 2003 operating software.

It can allow hackers to remotely take control of victims' machines. The victims don't need to do anything to get infected except visit a Web site that's been hacked.

Security experts say criminals have been attacking the vulnerability for nearly a week. Thousands of sites have been hacked to serve up malicious software that exploits the vulnerability. People are drawn to these sites by clicking a link in spam e-mail.

The so-called ``zero day'' vulnerability disclosed by Microsoft affects a part of its software used to play video. The problem arises from the way the software interacts with Internet Explorer, which opens a hole for hackers to tunnel into.

Microsoft urged vulnerable users to disable the problematic part of its software, which can be done from Microsoft's Web site, while the company works on a ``patch'' _ or software fix _ for the problem.

Microsoft rarely departs from its practice of issuing security updates the second Tuesday of each month. When the Redmond, Washington-based company does issue security reminders at other times, it's because the vulnerabilities are very serious.

A recent example was the emergency patch Microsoft issued in October for a vulnerability that criminals exploited to infect millions of PCs with the Conficker worm. While initially feared as an all-powerful doomsday device, that network of infected machines was eventually used for mundane moneymaking schemes like sending spam and pushing fake antivirus software.

Agencies

IBM-Sun talks on merger to extend beyond a few weeks

IBM's talks to acquire Sun Microsystems Inc are continuing and may extend beyond next week, according to a person with knowledge of the matter.

IBM is still examining Sun's business as part of its due diligence process, said the source, who was not authorized to speak about the talks and therefore requested anonymity.

Neither IBM nor Sun has issued any statement to say they are in talks, although sources said last week that the two sides are negotiating a merger that would bolster IBM's high-end server and software business.

The Wall Street Journal reported on March 18 that IBM could pay as much as $8 billion for Sun, amounting to a 100 percent premium for the high-end server computer maker. If a deal is sealed, it would be IBM's largest acquisition.

The source said on Thursday that IBM's due diligence process, or examination of Sun's business, was necessary considering Sun's size and complexity.

An IBM spokesman declined to comment, and Sun was not immediately available.

Some analysts have said Sun would bolster IBM's position against rivals like Hewlett-Packard Co and Cisco Systems Inc, both of which have been acquiring smaller, niche technology firms to broaden their product and service offerings.

Agencies