Slashdot Mirror

← Back to Stories (view on slashdot.org)

MS Monthly Patch Omits Word Zero-Days

Posted by kdawson on from the swelling-botnets dept.

bungee jumper writes "Microsoft released four bulletins with patches for 10 vulnerabilities but there are no fixes for known MS Word zero-day flaws that are under active attack, eWeek.com reports. The January batch covers critical bugs in Excel, Outlook, and Windows. The first confirmed Windows Vista flaw, a denial-of-service issue that was publicly released on an underground hacker site in Russia, also remains unpatched." eWeek notes that Microsoft originally scheduled eight bulletins for release, but pulled four last Friday without explanation.

2 of 80 comments (clear)

  1. Microsoft is so large... by HeadlessNotAHorseman · · Score: 2, Interesting

    Microsoft is such a big company, you would think that they would have been able to solve this by now. Why couldn't they have, for example, had two or three different teams working on a patch, and then choosing the best solution? They could even offer a nice reward to the winning team as an incentive.

    --
    I like my coffee the way I like my women - roasted and ground up into little tiny pieces.
  2. Outlook Express flaw? by anss123 · · Score: 1, Interesting
    Lately I've received spam with images displayed in Outlook Express, despite said feature being blocked. The image links look like these: mhtml:mid://00000088/!cid:003e01c7342e$d54bc0c0@Lo calHost

    Anyone know what this is about?