Frontpage
Forums
Tutorials
Members
Calendar
Subscription
Donate
Links
Contact 
Help
Latest Software News
Latest Hardware News
Latest Mobile
Latest Security News
Latest Forum Posts
Latest News Comments
-
Firefox 8 released, finally...
By MohdNishat, Yesterday, 02:45 PM
-
Google Chrome vs. IE10 on W...
By MohdNishat, Yesterday, 02:42 PM
-
Microsoft rebrands itself
By j7n, Apr 30 2013 05:00 AM
-
Microsoft rebrands itself
By j7n, Apr 30 2013 05:00 AM
-
Google releases Metro-style...
By gelapir, Apr 29 2013 04:59 AM
MSFN Statistics
Recommended Sites
Microsoft fixes gaping hole in Windows TCP/IP stack
Microsoft has released its November batch of security bulletins with fixes for at least four documented vulnerabilities affecting the Windows operating system. The updates address remote code execution and denial-of-service issues in all versions of Windows and Microsoft is urging its user base to pay special attention to MS11-083, which covers a gaping hole in the Windows TCP/IP stack.The raw details:
A remote code execution vulnerability exists in the Windows TCP/IP stack due to the processing of a continuous flow of specially crafted UDP packets. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
Because of the “critical” nature of this update, Microsoft is urging Windows users and administrators to treat MS11-083 with the utmost priority.
The company also fixed a serious vulnerability in Windows Mail that exposes users to hacker attacks via the Web browser.
Some basic details via the MS11-085 bulletin:
The vulnerability could allow remote code execution if a user opens a legitimate file (such as an .eml or .wcinv file) that is located in the same network directory as a specially crafted dynamic link library (DLL) file. Then, while opening the legitimate file, Windows Mail or Windows Meeting Space could attempt to load the DLL file and execute any code it contained. For an attack to be successful, a user must visit an untrusted remote file system location or WebDAV share and open a legitimate file (such as an .eml or .wcinv file) from this location that is then loaded by a vulnerable application.
Microsoft expects to see functional exploit code for this vulnerability within the next 30 days.
The November Patch Tuesday batch also contains fixes for a privilege escalation flaw in Active Directory (MS11-086) and a vulnerability in Windows kernel mode drivers (MS11-084) that could allow denial-of-service attacks.
Source: ZDNet
2 Comments
Page 1 of 1
the xt guy
11 November 2011 - 01:51 PM
Windows XP is "unaffected software" for 3 of the 4 vulnerabilities listed above (including the "gaping hole" in the TCP/IP stack) while Vista, Windows 7 and Server 2008 all are vulnerable.
erpdude8
14 November 2011 - 01:41 PM
@the xt guy: Windows Server 2003 is also not affected by the recent TCP/IP security hole mentioned in security bulletin MS11-083 and some other security holes mentioned in security bulletins MS11-084 & MS11-085.
Page 1 of 1