HelpWithWindows | Windows Forum | RoseCitySoftware




HelpWithWindows - Home

  Microsoft Security

Microsoft Issues Patch for Zero-Day Exploit

Early this week Microsoft announced a security update for the recently disclosed Windows animated mouse cursor flaw, which has resulted in a so-called "zero-day" exploit. So last Tuesday, Microsoft delivered a patch for this flaw in advance of its regularly scheduled monthly security patch schedule.

Bulletin Description  Impact  Bulletin Rating 
Vulnerabilities in GDI Could Allow Remote Code Execution (925902)


Affected Software:

  • Microsoft Windows 2000 Service Pack 4
  • Microsoft Windows XP Service Pack 2
  • Microsoft Windows XP Professional x64 Edition
  • Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
  • Microsoft Windows Server 2003 and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
  • Microsoft Windows Server 2003 x64 Edition
  • Windows Vista
  • Windows Vista x64 Edition

Remote Code Execution

Critical


Note: The flaw, which involves the Internet Explorer rendering engine, has already led to exploit code being available online, which in turn required Microsoft to move more quickly on the patch. This had let to some problems with the patch. Microsoft has released an update for an issue that has to do with the Realtek HD Audio Control Panel which may not start after you install the security update KB925902. You can get the update on the Microsoft Download site.




HelpWithWindows RoseCitySoftware

Software Products, Spotlight of the Week, Partners, RCS newsletter, Corporate Sales, List with us