Friday 14 November 2014

Winshock Microsoft Windows Bug Patch - Old Windows Vulnerability Revealed

New Windows bug/vulnerability revealed called Winshock. This has been present in all versions of Windows since Windows95.

Nicknamed WinShock (like BASH that was nick named ShellShock), it is rated 9.3 on the CVSS (Common Vulnerability Scoring System) vulnerability scale.  However, there is no proof of concept code yet to show how it can be exploited.
Winshock Microsoft Windows Bug Patch - Old Windows Vulnerability Revealed
Winshock Microsoft Windows Bug Patch - Old Windows Vulnerability Revealed

I was made aware of this yesterday - Microsoft released a number of patches which are already being released to home PCs via the Windows Update process.

Interestingly when I googled WinShock, Google automatically thought you meant WinSock (which is a communications protocol), and you have to tell it you actually mean WinShock.

Link to BBC News story

Microsoft patches '19-year-old' bug.  Microsoft patches a critical bug in its software that had existed for 19 years, according to IBM researchers. Read more:

No comments:

Post a Comment