Microsoft confirms Windows BROWSER Agreement
Based on foreign media reports , lately, a protection researcher launched an exterior fix Windows protection flaws is not the concept -based authentication code, and that this vulnerability could have all variations of Windows operating programs have an influence.
response, Microsoft said , in principle, customers remote code execution vulnerability by way of this assault is feasible .
Microsoft spokesman Mark Wodrich stated the vulnerability exists in BROWSER agreement, in spite of all of the Windows versions are impacted by this vulnerability , but it is for any main domain controller (PDC) server running technique to run the impact will Bigger.
Wodrich pointed out that the most beneficial answer would be to be limited to the edge from the firewall BROWSER agreement , although the nearby network , you will discover some attacks.
Wodrich stated the known Windows vulnerability is a buffer overflow vulnerability , a malformed BROWSER data will outcome in the browser hit the major part with the exploit code to set off this vulnerability.
Wodrich warned that in some cases, remote code execution (the greatest severity stage ) is likely to occur. In concept, remote code execution attacks exist, but in apply it's particularly challenging.
addition , Wodrich also pointed out that
now, Microsoft has not officially released for this vulnerability answer.
|