Microsoft warns of Windows 7 security hole
Microsoft has confirmed reports of a security flaw in
its Windows operating system that hackers could use to temporarily destabilize
Windows 7 PCs. The software giant also acknowledged that blueprints for
exploiting the flaw are now available online.
At issue is a so-called "denial-of-service"
vulnerability in the component of Windows that handles the sharing of files and
folders. Microsoft said attackers could use exploit code now publicly available
to cause vulnerable systems to stop functioning or become unreliable. The flaw
is present in Windows 7 and Windows Server 2008 R2, and does not exist in older
versions of the operating system, the software giant said.
In a security bulletin published Friday, Microsoft
said the vulnerability would not let attackers install malicious software or
take control over an affected system, and that any ill effects from an attack
on this flaw could be remedied by simply restarting the PC. In addition, the
kind of computer network traffic that would be needed to exploit this flaw is
easily blocked by using firewall software, such as the Windows firewall that
ships with Windows 7 systems.
Source: voices.washingtonpost.com