Slashdot Mirror
Domain: diffuse.it
Stories and comments across the archive that link to diffuse.it.
Stories · 2
-
Oops! Missed One Fix — Windows Attacks Under Way
CWmike writes "Microsoft says attackers are now exploiting a critical Windows bug that it didn't get around to fixing in its biggest batch of security patches in more than five years, issued yesterday. Microsoft said that 'limited and targeted' attacks are in progress by hackers exploiting an unpatched vulnerability in the WordPad Text Converter, a tool included with all versions of Windows. If Microsoft patches the WordPad problem on its monthly schedule, the first opportunity for fixing the flaw would be Jan. 9, 2009." Update: 12/10 22:28 GMT by T : OK, there might have been more than one: reader Simon (S2) writes "There is an even more serious flaw ... From SANS: 'There is a 0-day exploit for Internet Explorer circulating in the wild. At this point in time it does not appear to be wildly used, but as the code is publicly available we can expect that this will happen very soon. This is a brand new exploit that is *not* patched with MS08-073 that was released yesterday. I can confirm that the exploit works in a fully patched Windows XP machine. The exploit is a typical heap overflow that appears to be exploiting something in the XML parser.'" -
Second Galileo Test Satellite Now in Orbit
Simon (S2) writes to mention that Europe's second Galileo navigation satellite reached orbit this past weekend. Galileo is promising to offer several technological advances in comparison to the US-based GPS system but no longer promises to be a guaranteed service. "The Galileo programme now seems certain to go ahead, after a prolonged and painful shift from partly-private financing of the construction to public funds taken from unspent EU farm subsidies. This money would normally have been returned to donor nations, with the UK, Germany and the Netherlands as the biggest three. London MPs have expressed doubt as to whether the UK will receive value for the money it will pay, but have acknowledged that the British government doesn't actually have any choice about Galileo under EU funding rules."