As anticipated in the blog entry I made earlier today, Microsoft has published a highly critical patch (known as MS08-067) for Windows users.
Vanja in our labs has described the issue in greater detail on the SophosLabs blog and there is a more detailed analysis, including Sophos’s own take on the vulnerability, in a technical advisory.
Of course, you should also read Microsoft’s own official advisory on their website and download the patch. (Did I mention that? Get patched.)
This is a very serious vulnerability – you are advised to patch any potentially affected systems as a matter of…
Read more in my article on the Naked Security website.
Found this article interesting? Follow Graham Cluley on Twitter, Mastodon, or Threads to read more of the exclusive content we post.