microsoft
Report a problem

Exploit code for Windows critical bug available

Tom Warren   on 24 October 2008 - 12:13 · 10 comments & 6505 views

Advertisement (Why?)
Security researchers took 2 hours to reverse engineer yesterdays release of a critical patch for the Windows operating system.

According to The New York Times, developers of the Immunity security testing tool wrote an exploit after Microsoft released a patch for the issue yesterday. Immnuity's tool is available to paying customers to test their systems against exploit code.

Hackers and security researchers regularly reverse engineer patches after Microsoft release them in an effort to get workable exploit code.

In a statement yesterday Microsoft feared the vulnerability "could be used in the crafting of a wormable exploit". If exploited, the vulnerability would allow an attacker to take complete control of the computer and affect other machines on the network in worm-like fashion.

The flaw lies in the Windows Server service, used to connect different network resources such as file and print servers over a network.

Microsoft has urged customers to download the update direct from Microsoft.


Post a comment · Send to friend Comments · There are 10 additional comments
(1 reply) #1 warwagon on 24 Oct 2008 - 14:06
I'm Patched. Yay!
#1.1 Magallanes on 24 Oct 2008 - 17:03
Me too, Yay x 2
(1 reply) #2 exien on 24 Oct 2008 - 15:53
I don't need the patch, YAY!
#2.1 Glendi on 24 Oct 2008 - 21:55
I hope you'll still yay if you get exploited, yay!
#3 JoeC on 24 Oct 2008 - 23:27
Yay yay!
#4 cork1958 on 25 Oct 2008 - 08:30
Yeah, yay!!
#5 Patchou on 25 Oct 2008 - 16:47
yyyyyyaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaayyyyyyy
(1 reply) #6 Skynetfuture on 25 Oct 2008 - 17:15
STFU !
#6.1 warwagon on 26 Oct 2008 - 01:17
YAY
#7 ThaCrip on 27 Oct 2008 - 02:33
is everyone about 13-16ish years old on these forums? (it appears that way from the comments above *rolls eyes* )

but anyways... im pretty sure i got the patch a few days ago when Neowin made it know that MS releases a fix.

either way, good article... it keeps people informed about this sorta stuff... to bad that most of the people who need it probably dont know about it though but if they have windows updates to automatic they should be good.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)