Microsoft investigates 4 new bugs

By

Microsoft is investigating reports of four new software flaws.

Microsoft investigates 4 new bugs
On Monday attackers released three Office zero-day exploits on security forum, security vendor McAfee reported on a company blog. While two of the reported flaws merely result in an application crash, the third one looks more serious. It "might be exploited for code execution", wrote Karthik Raman, a McAfee researcher.

The fourth reported vulnerability affects the way that Windows handles .hlp files. It too "might" be used to executive arbitrary code that allows attackers to gain control of a system.

Microsoft has listed .hlp files as "unsafe" because they are executable. The format is has features similar to those of .exe files

The software vendor added that it isn't aware of any attacks targeting the new vulnerabilities.

Details of the flaws were released around Microsoft's Patch Tuesday, the second Tuesday of the month when the company issues new software updates. McAfee's Raman suggested that the timing could maximise the period that the public is exposed to the flaw before next month's patch release.

Microsoft however will issue so-called out of band patches whenever a vulnerability attracts wide-spread attacks.
Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Log In

  |  Forgot your password?