Vulnerabilities: Microsoft Flaw could lead to worm attack
January 12th, 2008 Posted/Linked by Shanmuga
"Microsoft has fixed a critical flaw in the Windows operating system that could be used by criminals to create a self-copying computer worm attack. The software vendor released its first set of patches for 2008 on Tuesday, fixing a pair of networking flaws in the Windows kernel. Microsoft also released a second update for a less-serious Windows flaw that would allow attackers to steal passwords or run Windows software with elevated privileges.
The critical bug lies in the way Windows processes networking traffic that uses IGMP (Internet Group Management Protocol) and MLD (Multicast Listener Discovery) protocols, which are used to send data to many systems at the same time. Microsoft says that an attacker could send specially crafted packets to a victim’s machine, which could then allow the attacker to run unauthorized code on a system." Microsoft: Flaw could lead to worm attack | InfoWorld | News | 2008-01-08 | By Robert McMillan, IDG News Service
If you enjoyed this post, make sure you subscribe to my RSS feed!
This entry was posted on Saturday, January 12th, 2008 at 10:51 am and is filed under Vulnerabilities. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.
