Microsoft patches critical hole in Windows kernel
Published: 11 Nov 2009 09:59 GMT
Microsoft on Tuesday issued six security bulletins fixing 15 vulnerabilities, including a critical patch for holes in the Windows kernel and other Windows and Office components that could allow an attacker to take control of a computer.
The critical bulletin affecting the Kernel-Mode Drivers was publicly disclosed and could be used to create a web page with malware designed to exploit the hole on systems that visit the page, Microsoft said in a blog.
"MS09-065, a bug in the Windows kernel, is this month's most serious issue," said Andrew Storms, director of security operations at nCircle. "The vulnerability allows for remote code execution, and the attack code can be embedded inside MS Office files or be hosted on websites. Simply browsing an infected website will compromise unsuspecting users — not great for all the holiday shoppers looking to get a jump on their shopping. The novelty value of this bug is likely to attract many researchers. A lot of people will try to be the first to publicly post exploit code."
For the full story, see Microsoft patches critical hole in Windows kernel on CNET News.
Did you find this article useful?
3 out of 3 people found this useful
Digg
Slashdot
Del.ici.ous
Stumble
Reddit
Full Talkback thread
1 comment
