“However, affected systems are still vulnerable to Remote Code Execution (RCE) exploitation if the attacker has valid credentials that can be used to successfully authenticate. “The affected systems are mitigated against ‘wormable’ malware or advanced malware threats that could exploit the vulnerability, as NLA requires authentication before the vulnerability can be triggered,” says Pope.
MICROSOFT OFFICE 2002 UPDATES UPDATE
Microsoft advises everyone to update – even if you have the partial mitigation on affected systems provided by Network Level Authentication (NLA). And here are the links to download for Windows 2003 and Windows XP.
Here are the links to download for Windows 7, Windows 2008 R2, and Windows 2008. But it is also making fixes available for these out-of-support versions of Windows in KB4500705. Meanwhile, people using out of support systems such as Windows 2003 and Windows XP really should upgrade the latest version of Windows, says Microsoft. Because Microsoft has hinted that the vulnerability is potentially wormable, this is something along the lines of WannaCry, he says.īut it also highlights something else that is worrying, says Wright: “There are likely many users or organizations who are still using it.”ĭownloads for in-support versions of Windows can be found in the Microsoft Security Update Guide. Those who have automatic updates enabled on their in-support version of Windows are already protected.
MICROSOFT OFFICE 2002 UPDATES PATCH
“The fact that Microsoft have decided to release a patch for an operating system that went out of support just over five years ago (8 April 2014), just illustrates how severe this vulnerability is,” says Sean Wright, independent security researcher.
0 kommentar(er)
