Is this the first zero-day security vulnerability in Microsoft's new operating system? According to ComputerWorld, Microsoft has confirmed the presence of a flaw through which attackers could crash Windows 7 and Windows Server 2008 R2 machines.
Reportedly, exploiting the flaw can bog down those operating systems "so thoroughly that the only recourse is to manually power off the computers." Microsoft's security advisory says the flaw has to do with the Server Message Block (SMB) protocol, which is used for file sharing in Windows networks, among other things.
Microsoft spokesperson Dave Forstrom told ComputerWorld, "Microsoft is aware of public, detailed exploit code that would cause a system to stop functioning or become unreliable. . . . The company is not aware of attacks to exploit the reported vulnerability at this time."
ComputerWorld also quotes Microsoft as saying attackers could exploit the vulnerability by tricking someone into opening a malicious address from "any browser." The attacker could then issue "malformed SMB packets" to crash the system. Microsoft hasn't committed to releasing a fix within a certain time frame yet, although it says users who wish to err on the side of caution can block TCP ports 139 and 445 in their firewalls.
|1. Hdfisise - $600||2. Ryszard - $503||3. Andrew Lauritzen - $502|
|4. the - $306||5. SomeOtherGeek - $300||6. Ryu Connor - $250|
|7. doubtful500 - $200||8. Anonymous Gerbil - $150||9. webkido13 - $135|
|10. cygnus1 - $126|
|Intel, Micron introduce revolutionary 3D XPoint memory||14|
|TechInsights dissects the R9 Fury X's HBM interface||1|
|Moto X Style packs a 21-MP camera, Snapdragon 808 power||7|
|Refreshed Moto G gets waterproofing, better camera, more colors||14|
|OnePlus 2 is a new generation of flagship killer||33|
|Google begins removing Google+ integration from its services||23|
|Radeon R9 Fury X voltage scaling results are underwhelming||88|
|Razer purchases Ouya's software platform and technical team||16|
|95% of Android phones vulnerable to Stagefright MMS exploit||58|