Slashdot Mirror

← Back to Stories (view on slashdot.org)

Microsoft Flip-Flops On URI Protocol Handing Flaw

Posted by kdawson on from the so-it's-a-bug dept.

a-twitter writes "After months of insisting there is nothing to patch, Microsoft has done a complete 180 on the URI protocol handling vulnerability, announcing in a security advisory that a Windows update will be released to revise URI handling code within ShellExecute() to be more strict. The MSRC blog explains the background and offers more details on this issue."

1 of 126 comments (clear)

  1. From one side of the mouth, then the other by ackthpt · · Score: 0, Redundant

    "There's nothing wrong with it"

    "Quick! Fix it! Hurry up we want this fixed in several months!"

    --

    A feeling of having made the same mistake before: Deja Foobar