Security researchers have found malicious code that can trigger a critical vulnerability in the Chinese version of Windows 2000. The non-Chinese users are warned to expect same attacks. Symantec confirmed that the code posted to the milw0rm.com site successfully attacks Chinese editions of Windows 2000 Service Pack 4 (SP4) exploiting one of the two critical bugs in Windows GDI, or graphics device interface, that Microsoft patched last week. So far attack code works only on Chinese versions of Windows 2000 while crashes Explorer, the Windows file manager, on non-Chinese versions of the OS. Security researchers urged the Windows 2000 users to update all the fixes released by Microsoft in MS08-021 security bulletin to patch their systems.
