Microsoft Has No Plans To Patch New Flaw

Posted by timothy on Sunday July 18, 2010 @07:50AM from the who-uses-usb-drives-anyhow dept.

Trailrunner7 writes "Microsoft has acknowledged the vulnerability that the new malware Stuxnet uses to launch itself with .lnk files, but said it has no plans to patch the flaw right now. The company said the flaw affects most current versions of Windows, including Vista, Server 2008 and Windows 7 32- and 64-bit. Meanwhile, the digital certificate that belonging to Realtek Semiconductor that was used to sign a pair of drivers for the new Stuxnet rootkit has been revoked by VeriSign. The certificate was revoked Friday, several days after news broke about the existence of the new malware and the troubling existence of the signed drivers."

2 of 217 comments (clear)

Re:Possible mitigation? by beelsebob · 2010-07-18 07:57 · Score: 4, Funny

Yes, that's working out really well for Motorola's publicity department with the Droid X just now.
Re:Source? by complacence · 2010-07-18 08:30 · Score: 5, Funny

Here's a picture of a pony:
http://babybird.files.wordpress.com/2009/08/pony.jpg
What are you trying to do here? There still is no outright refusal to fix this.
Instead it says:

We will continue to investigate the vulnerability and, upon completion of that investigation, we will take appropriate action to protect our customers.