Slashdot Mirror

← Back to Stories (view on slashdot.org)

Unofficial Patch For Windows URI Hole

Posted by kdawson on from the mother-please-i'd-rather-patch-it-myself dept.

dg2fer writes "For more than two months, the vulnerability of parsing URIs has been known for a number of Windows programs, including Outlook, Adobe Reader, IRC clients, and many more. Microsoft admitted the vulnerability only last week. The latest Microsoft patches published on October's Patch Tuesday did not include a solution, so hackers have taken on the problem themselves. One, KJK::Hyperion, has published (as open source) an unofficial patch that cleans up the critical parameters of URI system calls before calling the vulnerable Windows system function."

6 of 85 comments (clear)

  1. Well... by Joseph1337 · · Score: -1, Troll

    It would be better if they rewrote the whole system...

    1. Re:Well... by Anonymous Coward · · Score: -1, Troll

      you little bitch

  2. TAG IT: OPEN SAUCE by Anonymous Coward · · Score: -1, Troll

    The hackers pity the poor souls who haven't yet gotten off windoze.

  3. Open source, FTW! by Spy+der+Mann · · Score: -1, Troll

    This... is your computer on Open source (insert picture of a patched PC here)

    This... is your computer on Closed Source (insert a picture of a Storm-infected PC here)

    Any questions?

  4. kwl by dkd903 · · Score: -1, Troll

    Its high time Microsoft should start understanding the power of opensource and community development and better even it should now consider going open-source. what say, guys?

  5. You f4il It.. by Anonymous Coward · · Score: -1, Troll

    is not prone to Feelow travellers? This exploitation,