Microsoft Releases Patches for a Critical Windows Flaw Allowing WannaCry-Style Attacks

Microsoft Patches 'Wormable' Flaw in Windows XP, 7 and Windows 2003

Patch Tuesday It's that time of the month again, and Microsoft has released a bumper bundle of security fixes for Patch Tuesday, including one for out-of-support operating systems Windows XP and Server 2003.

That flaw, spotted by researchers at NCC Group, is a logic vulnerability that can be exploited to gain "remote access to a host's storage via Edge, Internet Explorer, Firefox and Chrome on Microsoft Windows by a malicious Citrix server". The vulnerability allows remote code execution with no user involvement or any authentication required, making it a gift to scum looking to spread malware. While Microsoft has not yet seen any case of this vulnerability being exploited, it is likely that hackers will incorporate an exploit for this vulnerability into new malware. The Remote Desktop Protocol itself hasn't been impacted. For such systems you can download updates via the Microsoft Security Update Guide or they will be delivered via automatic updates, if enabled. It also affects Windows 2003 and Windows XP-older versions of Windows that Microsoft doesn't typically patch.

Users of Windows 10 and Windows 8 aren't affected by the flaw, Microsoft said.

Microsoft advises that "all affected systems - irrespective of whether NLA is enabled or not - should be updated as soon as possible". It is wormable, meaning that it allows any malware exploiting the flaw to be able to spread from one vulnerable system to another. But this flaw is so serious that Microsoft has also issued a patch for Windows XP and its server brethren, which officially died five years ago.

Among the patches is a fix for a zero-day vulnerability in the Windows Error Reporting Service.

Official Look At The New Stranger Things LEGO 75810 The Upside Down
The level of detail here is really astonishing, and you can see that this isn't simply an easy tie-in. The Byers' house features a front porch with furniture, living room, dining room and Will's bedroom.

The Windows exploit (CVE-2019-0708) affects machines running Windows 7, Windows Server 2008 R2, and older versions.

"An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights", Microsoft said in the vulnerability advisory.

The latter is only a partial mitigation. "This vulnerability will make that process even easier".

RIDL and Fallout can be exploited via unprivileged code such as shared cloud computing resources and Javascript on malicious websites or in ads. They can be found in the source link below, near the end of the page. Referred to as the May 14, 2019-KB4500154 Update, this update brings the Windows 10 Mobile operating system to build number 15254.566.

Related:

  • Earth’s moon is shrinking and quaking, study says

    Earth’s moon is shrinking and quaking, study says

    Of those quakes, eight were picked up near to the faults that could be seen in images of the Moon's surface. The pushed-up crusts typically measure tens of meters high and extend for a few miles, NASA said.
    Trump to Ban US Firms From Using Foreign Tech Deemed ‘Security Risk’

    Trump to Ban US Firms From Using Foreign Tech Deemed ‘Security Risk’

    The leaks resulted in Theresa May firing her defense minister Gavin Williamson, despite Williamson denying leaking anything. The new order, if enacted, won't change much for big wireless carriers, which aren't using Huawei equipment, Reuters says.
    Sri Lanka province under curfew after first riot death

    Sri Lanka province under curfew after first riot death

    Muslim residents in parts of the country's North Western Province accused the police and army of standing by while mobs attacked. The Islamic State group claimed responsibility for the attacks, which were carried out by radicalised local Muslims.
  • The new revamped Apple TV app is launching today

    The new revamped Apple TV app is launching today

    Apple has been working with some of the biggest TV manufacturers to expand the footprint of its new TV app. AirPlay 2 and HomeKit functionality will arrive for certain Vizio, LG and Sony smart TVs later this year.
    ITV axes Jeremy Kyle Show after death of participant

    ITV axes Jeremy Kyle Show after death of participant

    It's reported that he appeared to have died from an overdose of prescription medication, which he was taking for arthritis. Jeremy returned to radio previous year with a weekly show on talkRADIO, but he presented his last show on March 30th 2019.
    Daniel Craig Ankle Injury Suspends

    Daniel Craig Ankle Injury Suspends "Bond 25" Filming

    It's not yet known whether Craig has fractured, broken or bruised his ankle. " Bond 25 " is set to premiere in April 2020. Along with Daniel, the recurring cast includes Jeffrey Wright, Ben Wishaw, Ralph Fiennes and Naomie Harris.
  • Iran: Suspect sentenced to 10 years for spying for Britain

    Iran: Suspect sentenced to 10 years for spying for Britain

    Iran is already holding British-Iranian national Nazanin Zaghari-Ratcliffe, who is in jail in Tehran for alleged sedition. British council employee Aras Amiri, a 32-year-old Iranian national, was arrested in March last year in Iran.
    Watch as Alabama Senate debates abortion ban bill

    Watch as Alabama Senate debates abortion ban bill

    Democrats and abortion advocates fear that the law would drive abortions underground, endangering the lives of women. Kay Ivey has not said whether she will sign it, and said she was waiting for a final version of the bill.
    Saudi oil pipeline booster stations targeted by drone attacks

    Saudi oil pipeline booster stations targeted by drone attacks

    President Donald Trump and moved to impose higher tariffs on a range of U.S. goods including liquefied natural gas. Tehran has called the United States military presence "a target" rather than a threat.
  • US, Russia 'share same objective' on North Korea: Mike Pompeo

    US, Russia 'share same objective' on North Korea: Mike Pompeo

    He added that the US would not tolerate similar engagement in the upcoming 2020 election. He also was critical of US sanctions punishing countries doing business with Iran.
    Investigators Seek Man City's Ban From Champions League

    Investigators Seek Man City's Ban From Champions League

    Manchester City could be banned from the Champions League for a season should they be found guilty of breaking financial rules, according to reports.
    'Game of Thrones' showrunners behind next 'Star Wars' film

    'Game of Thrones' showrunners behind next 'Star Wars' film

    If you're not happy with the way " Game of Thrones " is ending and you're a " Star Wars " fan, well, step away from the computer. As for Rian Johnson's new trilogy, there has been no confirmation as to when those films may be slated for release.

Comments

Latest news

How much coffee is too much? | newkerala.com #141250
According to new research published in The American Journal of Clinical Nutrition , excess caffeine can lead to high blood pressure , which, in turn can cause heart disease.

WhatsApp urges users to upgrade app after report of spyware attack
No matter what you're doing, if you have WhatsApp installed on your phone, you should update it now. This is another reminder of how important it is to keep all the apps on your phone updated.

Texas woman "says I’m pregnant" before being shot dead by policeman
At this time, the officer who shot Turner has been placed on paid administrative leave pending an investigation into the shooting. Police said they could not confirm whether she was pregnant and that an autopsy will determine that.

The Black Mirror Season 5 Trailer is Here!
The Wrecking Ball singer filmed scenes for the fifth instalment, shooting alongside Marc Menchaca ( Ozark ), in South Africa.

A-list celebs help pump $300M in funding into Impossible Foods
The growing demand for, and supply of, plant-based meats could help curb the huge carbon footprint of modern beef production. The startup's sales in Asia, including Singapore, have risen more than three-fold since March 2019.

Vijay Singh withdraws from PGA Championship
Open at Torrey Pines, which Woods played on shredded ligaments in his left knee and a double stress fracture in the leg. Outside of Tiger, Reed is the best all-around player on this list. "He got his [injury] fixed for some reason".

Villa's Jed Steer stares down Mason Holgate before penalty save
West Brom won 1-0 on the night at the Hawthorns to level the tie at 2-2 on aggregate thanks to Craig Dawson's first half header. Villa, relegated in 2016, will hope to avoid a repeat of previous year when they lost to Fulham in the playoff final.

Myanmar passenger jet lands safely after landing gear fails
Heart in mouth, bystanders were able to film the miraculous emergency landing which was safely - if not gracefully - performed. The airline confirmed that there were no injuries from the incident and the pilot carefully landed the plane onto the runway.

Organisers reveal Madonna's Eurovision performance is not yet confirmed
Madonna issued a statement on Tuesday, ahead of her expected arrival in Tel Aviv for a performance at the Eurovision event. Seventeen worldwide acts will take to the stage but only 10 will make it to the 26-strong grand final on Saturday May 18.

Trump says tariffs battle will help U.S. farmers
China earlier imposed additional tariffs on US$60 billion worth of U.S. imports. The farmers have been "forgotten" for many years.

Red Dead Redemption 2 coming to PC, new evidence found
This obviously hints at a PC release for this latest Rockstar game , though 2K Games has not announced anything yet. Red Dead Redemption 2 shipped 17 million copies right at launch , with a further six million coming by November.

'We're here to stay': Robertson vows Liverpool will battle City again
Indeed, one Man City fan tweeted on Sunday: "I don't get why Liverpool fans are so proud of being happy they've failed AGAIN". Virgil van Dijk rattled the crossbar late on as Liverpool completed a remarkable season with a flourish.

Judge suppresses massage spa video of Patriots owner Robert Kraft
Kraft's attorneys are expected to file a motion to dismiss the case based on a lack of evidence, ESPN's T.J. National Football League officials have said they are watching the case, but have not disciplined Kraft.

Prince William Shares a Mental Health Message Alongside Katy Perry
Results showed a negative impact on young people's self-esteem and body image in relation to social media. Results revealed almost a third (31%) of teens feel ashamed about their body image.

A new 'Mortal Kombat' movie will start filming this year
Visual effects and post-production work will also be completed in the state. Mortal Kombat 11 is available now on PS4, PC, Xbox One and Nintendo Switch.

Other news