Microsoft Patches Flaw That Could Trigger Worm Attack
Robert McMillan, IDG News Service
With HP wireless printers, you could have printed this from any room in the house. Live wirelessly. Print wirelessly.
Other Patches
The critical MS08-001 update that fixes this flaw also patches a second, less-serious bug in the Windows networking stack that could be leveraged to launch a denial of service attack against a Windows system. This vulnerability lies in the Internet Control Message Protocol Router Discovery Protocol (ICMP RDP) which is used by Windows to find out how to communicate with the network. Because this capability is not turned on by default, Microsoft considers this to be merely an "important" bug.
Microsoft's other Tuesday update, MS08-002, fixes an elevation of privilege flaw in the Windows Local Security Authority Subsystem Service (LSASS), used to manage account credentials in Windows.
This flaw could be exploited by attackers to steal passwords or run their code with a higher level of privilege on Windows, said Schultze. "The primary concern is Johnny who is a user becoming Johnny admin," he said. But if attackers were to combine an attack that exploited this flaw with another exploit that would allow them to run code on the system, then "that could become a critical issue," he said.
- « Prev
- Page 2 of 2
Webcast: Going Green
PCW Download Guide
Tags at a Glance
Related Windows Articles
- Mainsoft Backs Visual Studio 2008 in Tools Cross-platform development products leverage Windows skills for deployment on Java, Linux, and Unix.
- Vista May Still Have Its Day Think Windows Vista is a hopeless dog and XP was always the cat's meow among users? Think again.
- One-Third of New PC Buyers Opt for XP New data finds 1 in 3 business PCs pass on Vista to get Windows XP under Microsoft's "downgrade" offer.
- Microsoft Updates a Patch Microsoft has re-released a security updates, saying the initial patch was incomplete.
- Vista Users Rush for SP1; XP Owners Dawdle on SP3 Pent-up demand for Vista fixes drove users to install SP1, researcher says.
Office Suites
Office 2007 Professional (Academic)Price: $75.83
Office 2003 ProfessionalPrice: $133.00
Office 2007 Home and StudentPrice: $82.76
Office 2007 ProfessionalPrice: $174.92
Office: Mac 2008 Home and StudentPrice: $119.99
Office 2007 StandardPrice: $179.93
- CDW Virtualization Center What is Virtualization and how can it help you save money? Click here to find out.
- Try it Free Center An assortment of free software and free trial offers to choose from. Check it out!
- Lenovo Laptop Showcase Find out how Lenovo IdeaPads and Thinkpads balance performance and portability. Visit the Lenovo Resource Center for more info...








"Microsoft Patches Flaw That Could Trigger Worm Attack" Comments