Microsoft investigates 4 new bugs

By

Microsoft is investigating reports of four new software flaws.

Microsoft investigates 4 new bugs
On Monday attackers released three Office zero-day exploits on security forum, security vendor McAfee reported on a company blog. While two of the reported flaws merely result in an application crash, the third one looks more serious. It "might be exploited for code execution", wrote Karthik Raman, a McAfee researcher.

The fourth reported vulnerability affects the way that Windows handles .hlp files. It too "might" be used to executive arbitrary code that allows attackers to gain control of a system.

Microsoft has listed .hlp files as "unsafe" because they are executable. The format is has features similar to those of .exe files

The software vendor added that it isn't aware of any attacks targeting the new vulnerabilities.

Details of the flaws were released around Microsoft's Patch Tuesday, the second Tuesday of the month when the company issues new software updates. McAfee's Raman suggested that the timing could maximise the period that the public is exposed to the flaw before next month's patch release.

Microsoft however will issue so-called out of band patches whenever a vulnerability attracts wide-spread attacks.
Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Ex-student charged over Western Sydney University cyberattacks

Ex-student charged over Western Sydney University cyberattacks

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

SA Water plans 'once-in-a-generation' core technology uplift

SA Water plans 'once-in-a-generation' core technology uplift

Log In

  |  Forgot your password?