Saturday, March 22, 2003

Microsoft Warns of New Windows Flaw
Microsoft Corp. has released a patch for a critical vulnerability in every version of Windows from 98 forward.

The flaw lies in the Windows Script Engine for Jscript, which enables the operating system to execute script code. The engine incorrectly processes the script and does not correctly size a buffer during a memory operation. As a result, an attacker could cause a buffer overflow and execute code of his choice on a vulnerable machine.

The patch for this vulnerability is available here. http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-008.asp
http://www.eweek.com/article2/0,3959,941455,00.asp

No comments:

Post a Comment

con·cept