Microsoft Releases Emergency Patch For RCE Vuln

Time to patch!

Late last night Microsoft released an emergency out-of-band patch to fix a vulnerability in Microsoft Malware Protection Engine (MsMpEng) that one of the researchers who found it called "the worst Windows remote code exec(ution) in recent memory," and for which US-CERT released an alert.

Announced over the weekend by a pair of researchers working for the Google Project Zero team, Tavis Ormandy and Natalie Silanovich, the vulnerability allows attackers to carry out remote code execution (RCE) by feeding MsMpEng a simple malicious file to trigger memory corruption. According to Silanovich, the vulnerability only requires a simple exploit to leverage, requiring so little code that it can fit in a single tweet. According to Microsoft Security Advisory 4022344, the affected version of the engine must scan the specially crafted file, but that can be easily achieved a number of ways.

"For example, an attacker could use a website to deliver a specially crafted file to the victim's system that is scanned when the website is viewed by the user. An attacker could also deliver a specially crafted file via an email message or in an Instant Messenger message that is scanned when the file is opened," Microsoft advises. "In addition, an attacker could take advantage of websites that accept or host user-provided content, to upload a specially crafted file to a shared location that is scanned by the Malware Protection Engine running on the hosting server." 

Read more - click here.

Da Boss!

Website: www.digitalsmind.com Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Latest Content

  • Capture amazing fireworks shots with your iPhone (and Android)
    Written by
    Capture amazing fireworks shots with your iPhone (and Android) So tonight is the night we here in the U.S.…
    Read more...
  • Work From Home In 2017: The Top 100 Companies Offering Remote Jobs
    Written by
    Work From Home In 2017: The Top 100 Companies Offering Remote Jobs I work from home, the can, the bedroom, the front-yard,…
    Read more...
  • Microsoft delays its Windows 10 Timeline feature
    Written by
    Microsoft delays its Windows 10 Timeline feature When you have a piece of code in front of…
    Read more...
  • Refurbished: Microsoft Xbox One S 1TB Console - Madden NFL 17 Bundle - 182.00 (WSL)
    Written by
    Holy cow! 182.00 for the latest and greatest! Damn... if…
    Read more...
  • Refurbished: Microsoft Xbox One 1TB Console - 3 Games Holiday Bundle - 160.00 (WSL)
    Written by
    Refurbished: Microsoft Xbox One 1TB Console - 3 Games Holiday Bundle - 160.00 (WSL) Um...that's one hell of a deal foks.
    Read more...

Visit the Digitalsmind Video YouTube Page!

Did you know we have a video page on YouTube? 

Well... WE DO! 

Check us out! 

- Our Video page.