Wednesday, November 14, 2007

Windows bug fixed by Microsoft


In its latest monthly patch release, Microsoft has patched a Windows bug that was deemed "critical" and has possibly been being exploited by cyber criminals.

The MS07-061 patch fixes an important flaw in Windows' Uniform Resource Identifier, which is involved in Windows' process for passing information between applications. Ben Greenbaum, a senior research manager at Symantec, told the Associated Press that the security flaw is "concerning". By taking advantage of the security flaw, cyber criminals could take over a victim's computer and steal crucial information such as passwords and financial information. Once infected, the victim's computer could also be used to disseminate spam.

This month unusually saw only two patches released, the other of which was deemed "important", the second-highest level of security rating for a patch. The second patch is for those with computers running the Windows 2000 Server and the Windows Server 2003.

No comments: