Slashdot Mirror

← Back to Stories (view on slashdot.org)

MS Monthly Patch Omits Word Zero-Days

Posted by kdawson on from the swelling-botnets dept.

bungee jumper writes "Microsoft released four bulletins with patches for 10 vulnerabilities but there are no fixes for known MS Word zero-day flaws that are under active attack, eWeek.com reports. The January batch covers critical bugs in Excel, Outlook, and Windows. The first confirmed Windows Vista flaw, a denial-of-service issue that was publicly released on an underground hacker site in Russia, also remains unpatched." eWeek notes that Microsoft originally scheduled eight bulletins for release, but pulled four last Friday without explanation.

3 of 80 comments (clear)

  1. Public, underground? by Anonymous Coward · · Score: -1, Offtopic

    publicly released on an underground hacker site in Russia In other words: at the bottom of a filing cabinet in a disused toilet, etc.

    Or did the "undergrounds" sell out and go mainstream?
  2. f=p fuc4er by Anonymous Coward · · Score: -1, Offtopic

    said one FrreBSD Are about 7000/5

  3. Score 5, Insightful? by Anonymous Coward · · Score: -1, Offtopic

    Even more baffling, the current moderation is "40% Insightful, 30% Informative". Funny maybe, but what "insight" or "information" does the parent post provide? Ridiculous...