Linux News
The world is talking about GNU/Linux and Free/Open Source Software
More cracks appear in Windows
|
Never-ending patch cycle
Microsoft released two more critical patches on Tuesday - days after it released an emergency fix for a critical WMF vulnerability that has been exploited by hackers and virus writers. The two latest updates - which, unlike the WMF patch, came out as part of Microsoft's regular Patch Tuesday update cycle - fix a flaw in the way Microsoft Windows processes embedded web fonts (MS06-002) and a Microsoft Outlook and Microsoft Exchange Transport Neutral Encapsulation Format (TNEF) decoding vulnerability (MS06-003).
Exploitation of these vulnerabilities creates a means for hackers to execute arbitrary code or cause a denial of service on a vulnerable system. The earlier WMF vulnerability remains the easiest to exploit, but security vendors warn that the embedded web-forms flaw also caries a computer worm risk.
|
|
Full Story |
You cannot post until you login.
