Tuesday, 18 November 2014

19 year old bug in Windows, finally patched.



A flaw has been discovered by the IBM researchers that affects Windows and Office products, in May this year. However, it took time to work with Microsoft to repair the issue before going public.
This particular bug was present all versions of Windows since 95, IBM told.
Hackers and attackers could easily exploit the bug and remotely take control of a PC, and that’s why users are being requested to download updates.
The problems was taken care of with the monthly security update by Microsoft security update, followed by 14 patches with two more ready to hit the deck soon.





Researcher Robert Freeman of IBM wrote in a blog post clarifying the vulnerability deeply: “The bug can be used by an attacker for drive-by attacks to reliably run code remotely and take over the user’s machine.”
IBM told that the bug had been “sitting in plain sight”.
The vulnerability has been graded as 9.3 out of a possible 10 on the common Vulnerability Scoring System (CVSS), a measure of severity in computer security.

No comments:

Post a Comment