Slashdot Mirror

← Back to Stories (view on slashdot.org)

MS Critical Patch Fixes 8 Vulnerabilities

Posted by CmdrTaco on from the your-server-is-sick dept.

nandemoari writes "A hole allowing hackers to take control of Microsoft Exchange was just one 'critical' issue the Redmond-based company promises it has fixed with a patch correcting a total of eight vulnerabilities in its programs, including the Internet Explorer browser, Office, and its SQL Server. Three of the eight vulnerabilities patched yesterday were marked 'critical.' The most concerning is an issue with Exchange that would allow attackers to take over an Exchange server by simply forwarding a carefully crafted message to a corporate mail server. Microsoft has admitted that the vulnerability can be exploited when a user opens or previews an email in the Transport Neutral Encapsulation Format (TNEF)."

3 of 202 comments (clear)

  1. Re:Its really time to spread the word: by lukas84 · · Score: 0, Troll

    You realise that the topic is about Exchange.

    None of the products mentioned provide the functionality Exchange has.

  2. Re:Its really time to spread the word: by mlwmohawk · · Score: 0, Troll

    You realise that the topic is about Exchange.

    None of the products mentioned provide the functionality Exchange has.

    The topic is about patches to Windows and its services, and this indirectly about the piss poor reliability and quality of Windows.

  3. Re:MS Proprietary Protocols have a history of flaw by compusci · · Score: 0, Troll

    You're wrong about WMI - no longer supported in Exchange - EWS used instead. While it still exists, it is continuing to be replaced by other Microsoft protocols for Microsoft Server products, like Exchange and MS SQL Direct X - requires more hardware than OpenGL to run and many third-party developers will report problems programming under this API - XBOX issues have occurred as a result of Direct X instablities Also, you clearly know little about OpenGL if you think it is less stable and performs poorer than Direct X. UAC - seriously, what use is this - can I really be more secureusing an annoying pop-up notifier? I think not. Automatic Updates - seriously, show me another update manager that is worse. Examples that are much better: linux yum and OS X Software Updates. Furthermore, what is the point of an OS that isn't compatible with anyone else???? Windows is rarely compatible with their own legacy software, let alone others...