Slashdot Mirror

← Back to Stories (view on slashdot.org)

Four New Unpatched Windows Vulnerabilities

Posted by CowboyNeal on from the most-wonderful-time-of-the-year dept.

peeon writes "Right before Christmas, four new Windows NT/2k/XP vulnerabilities were posted to the Bugtraq list. This story discusses two of the vulnerabilities in the LoadImage function (buffer overflow) and Windows Help program (heap overflow), but the Chinese company discovered two more exploits in the parsing of a specially crafted ANI file (causes DoS). A Bugtraq posting has more details."

5 of 273 comments (clear)

  1. YAWN by tarunthegreat2 · · Score: 5, Funny

    Hmmm, so windows has bugs in it. Surprise surprise. Merry Christmas everyone. In Soviet Russia, Windows Exploits you...oh wait...

    --
    My Favourite Meme
  2. Re:Timing of the post by tarunthegreat2 · · Score: 4, Funny

    when corporate computer use is at a minimum?

    Not in my office... our mailserver just went down due to a large number of 'seasonal' flash attachments coming and going out and PHB OutOfOffice AutoReplies. I can just see the SysAdmin's tears shorting out the domain controller as we speak....

    --
    My Favourite Meme
  3. But... by RAMMS+EIN · · Score: 4, Funny

    Will they allow me to install Linux once i 0wn the machine?

    --
    Please correct me if I got my facts wrong.
  4. Silent Night by Electronik · · Score: 4, Funny

    Silent night, holey night,
    All is calm, all is bright,
    Round yon virgin PC and screen,
    Holey computer, so exploitable and keen,
    Sleep with spyware downloading,
    Sleep with spyware downloading.

    --
    -=test-sig_0.1.5(NoWhitespaceVersion)=-
  5. Twas the morn before christmas by killerface · · Score: 4, Funny

    Twas the morn be for Christmas and all through the cage.
    Not a creature was stirring not even a 10th level mage.
    Then Flash, i look at my bookmarks and what did appear!?
    A story on slashdot spreading with fear.
    "Peril Peril", It screamed with fervor and fight.
    "What shall we do about this vulnerability tonight?"

    It's christmas eve and in the story lay more,
    For this affected Santa and hurt him to the core.
    His Server Used Exchange to give and recieve,
    a malicious cracker got in to make Santa Grieve.

    The clean cut elves said format and reinstall, while the ones with long beards solved it in no time at all.

    "There will be no Christmas this year" Santa Said with dismay.
    The naughty and nice list was lost in the fray.

    And yet with precision and care the elves brought out from back,
    santas new gift! a blade server rack!

    "It runs Linux in fact!" said the elves in unison
    "cron jobs too, back up that old piece of Sh.."
    one interupted "Stop it Sam",

    So christmas would go on with ease and ablitity, that is until santa went on his killing spree.

    The End