Microsoft to release single patch for January update

By

Easy start to 2010.

Microsoft is prepping a single fix for its monthly security update on Tuesday.

The lone patch is graded "critical" for Windows 2000 platforms and as "low" for all other operating system versions, said Jerry Bryant, a security program manager at Microsoft, in a blog post. He added that the vulnerability's exploitability risk, to be announced in Tuesday's bulletin, also is expected to be minimal.

The singular fix coming means that for the second consecutive month, Microsoft is not releasing a patch for a zero-day bug in the Server Message Block (SMB) protocol. The company has said that successful exploitation of the flaw, which affects Windows 7 and Server 2008 Release 2, can lead to a denial-of-service that results in a system crash — but not the injection of malicious code. Exploit code has been published, but Microsoft says it is not aware of any in-the-wild attacks.

In November, it published an advisory for the issue, which suggested workarounds.

"We are not aware of any active attacks using the exploit code that was made public for this vulnerability and continue to encourage customers to follow the guidance in the advisory which outlines best practices to help protect systems against attacks that originate outside of the enterprise perimeter," Bryant said in the blog post.

See original article on scmagazineus.com

Microsoft to release single patch for January update
Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

"Widespread data theft" hits Salesforce customers via third party

"Widespread data theft" hits Salesforce customers via third party

Home Affairs adds SecOps to new cyber risk overhaul

Home Affairs adds SecOps to new cyber risk overhaul

Exetel fined $694k over system 'vulnerability' for mobile number porting

Exetel fined $694k over system 'vulnerability' for mobile number porting

Attackers weaponise Linux file names as malware vectors

Attackers weaponise Linux file names as malware vectors

Log In

  |  Forgot your password?