Microsoft fixes '19-year-old' bug with emergency patch

http://www.bbc.com/news/technology-30019976

 

Always makes you think about how many other ones aren't known about yet.

 

"Attackers could exploit the bug to remotely control a PC, and so users are being urged to download updates."
So no bad guy has taken advantage of this during the 19 years

"but worked with Microsoft to fix the problem before going public."
Good, other "researchers" should do the same.

 

I presume that XP won't be patched, even though the bug has been there for 19 years....

 

XP is already fixed, same time as the others, like it will be for the next 5 years.

 

Public exploit available.

 

A Killer Combo: Critical Vulnerability and ‘Godmode’ Exploitation on CVE-2014-6332

 

Solutions and Recommendations

From MrBrians's link

My solution

Install a Script intercepter/blocker such as ScriptDefender http://www.analogx.com which works fine on, for eg my XP/SP2. Try it on your OS

 

From the article:

Microsoft Security Bulletin MS14-064 - Critical
https://technet.microsoft.com/en-us/library/security/ms14-064

It appears that if you don't use Internet Explorer, this exploit on a web page won't run.


----
rich