Η Microsoft κλείνει πολύ σοβαρό κενό ασφαλείας των Windows που αφορά USB συσκευές
Στην χθεσινή patch Tuesday της Microsoft, ένα από τα bug fixes αφορούσε ευπάθεια των Windows σε μολυσμένες USB συσκευές. Εκτός του κλεισίματος του συγκεκριμένου κενού ασφαλείας, δόθηκε επιπλέον λογισμικό που καταγράφει σε log file όσες απόπειρες γίνουν στους αναβαθμισμένους υπολογιστές για εκμετάλευση του USB flaw.
Οι επηρεαζόμενες εκδόσεις Windows είναι :
An elevation of privilege vulnerability exists when the Mount Manager component improperly processes symbolic links. An attacker who successfully exploited this vulnerability could write a malicious binary to disk and execute it.
To exploit the vulnerability, an attacker would have insert a malicious USB device into a target system. The security update addresses this vulnerability by removing the vulnerable code from the component.
Microsoft received information about this vulnerability through coordinated vulnerability disclosure. When this security bulletin was issued, Microsoft has reason to believe that this vulnerability has been used in targeted attacks against customers.
Οι επηρεαζόμενες εκδόσεις Windows είναι :
An elevation of privilege vulnerability exists when the Mount Manager component improperly processes symbolic links. An attacker who successfully exploited this vulnerability could write a malicious binary to disk and execute it.
To exploit the vulnerability, an attacker would have insert a malicious USB device into a target system. The security update addresses this vulnerability by removing the vulnerable code from the component.
Microsoft received information about this vulnerability through coordinated vulnerability disclosure. When this security bulletin was issued, Microsoft has reason to believe that this vulnerability has been used in targeted attacks against customers.
Δεν υπάρχουν σχόλια