The UK’s equivalent of CERT has warned of a buffer overflow vulnerability related to cutting and pasting HTML from a malicious Web page. The UK government’s cyberagency responsible for warning about security incidents and electronic attacks on critical national infrastructure has issued an alert about a Microsoft buffer overflow vulnerability. The Unified Incident Report and Alerting Scheme (UNIRAS), the UK’s equivalent of CERT, has put out the warning following a Microsoft security bulletin last week. The flaw was rated critical by Microsoft and consists of a buffer overflow in the HTML converter of most versions of Windows that could allow a hacker to execute malicious code. Full Story