Categories: PCSecurityWorkspace

Windows 7 and Server Bug Reported After Patch Tuesday

Less than 24 hours after Microsoft’s Patch Tuesday, a security researcher revealed a zero-day bug affecting Windows 7 and Windows Server 2008 Release 2.

Researcher Laurent Gaffie posted proof-of-concept code as well as information about the flaw on his blog and the Full Disclosure mailing list 11 Nov. The exploit takes advantage of the implementation of SMB (Server Message Block). An attacker can use the bug to remotely crash Windows 7 and Windows Server 2008 R2 on a LAN or via Internet Explorer. Technical details can be found here.

A Microsoft spokesperson said the company is looking into the matter.

“Microsoft is investigating new public claims of a possible denial-of-service vulnerability in Windows Server Message Block,” the spokesperson said in an e-mail. “We’re currently unaware of any attacks trying to use the claimed vulnerability or of customer impact. Once we’re done investigating, we will take appropriate action to help protect customers. This may include providing a security update through the monthly release process, an out-of-cycle update or additional guidance to help customers protect themselves.”

While users await a patch, Gaffie advised users close the SMB feature and ports.

November’s Patch Tuesday update addressed 15 security vulnerabilities affecting Windows and Microsoft Office.

Brian Prince eWEEK USA 2014. Ziff Davis Enterprise Inc. All Rights Reserved

Share
Published by
Brian Prince eWEEK USA 2014. Ziff Davis Enterprise Inc. All Rights Reserved

Recent Posts

Craig Wright Sentenced For Contempt Of Court

Suspended prison sentence for Craig Wright for “flagrant breach” of court order, after his false…

3 days ago

El Salvador To Sell Or Discontinue Bitcoin Wallet, After IMF Deal

Cash-strapped south American country agrees to sell or discontinue its national Bitcoin wallet after signing…

3 days ago

UK’s ICO Labels Google ‘Irresponsible’ For Tracking Change

Google's change will allow advertisers to track customers' digital “fingerprints”, but UK data protection watchdog…

3 days ago

EU Publishes iOS Interoperability Plans

European Commission publishes preliminary instructions to Apple on how to open up iOS to rivals,…

4 days ago

Momeni Convicted In Bob Lee Murder

San Francisco jury finds Nima Momeni guilty of second-degree murder of Cash App founder Bob…

4 days ago