News

Windows Zero-Day Vulnerability Investigated by Microsoft

An unnamed security researcher released information Monday on a discovered Windows vulnerability that could be used to perform remote code execution. Along with bringing the hole to the attention of Microsoft, the researcher posted the proof-of-concept exploit code that triggers a blue-screen PC system freeze.

The vulnerability affects all versions of Windows, with Microsoft cautioning that system servers running as the primary domain controller may be at highest risk, according to the researcher, identified only by the user name "Cupidon-3005."

In a TechNet blog, Matt Oh, member of the MMPC Vulnerability Response Team, provided some more details on the situation: "...the vulnerability is inside an error-reporting function of the CIFS browser service module. The function gets a variable number of arguments as parameters. Those string arguments are pushed on the stack for processing. In some cases, some of the strings can be controlled by the attacker."

Oh continued by saying that once a PC is controlled by a hacker it could be possible for malicious code to be freely distributed to the compromised system.

The Microsoft security team is very optimistic that exploitations of the vulnerability for this purpose should be rare. The team added that "while [a remote code execution] is theoretically possible, we feel it is not likely in practice, wrote Mark Wodrich, MSRC engineer, in a blog post.

However, Wodrich does feel that there is some concern that hackers may use this newly documented opening to launch a denial-of-service attack.  

Microsoft has not yet released a security advisory on the vulnerability and has offered no workaround fix as it continues to investigate the security concern. With the release of February's patches just last week, an official patch may not surface until Microsoft's March security update, or Microsoft could release an interim "out-of-band" patch.

About the Author

Chris Paoli is the site producer for Redmondmag.com and MCPmag.com.

Featured

  • Windows 10 Mobile To Fall Out of Support in December

    Microsoft will end support for the Windows 10 Mobile operating system on Dec. 10, 2019, according to an announcement.

  • Get More Out of Your Outlook Inbox with TakeNote

    Brien comes across a handy, but imperfect, feature in Outlook that lets you annotate specific e-mails. Its provenance is something of a mystery, though.

  • Microsoft Resumes Rerelease of Windows 10 Version 1809

    Microsoft on Wednesday once more resumed its general rollout of the Windows 10 version 1809 upgrade, also known as the "October 2018 Update."

  • Microsoft Ups Its Windows 10 App Compatibility Assurances

    Microsoft gave assurances this week that organizations adopting Windows 10 likely won't face application compatibility issues.

comments powered by Disqus
Most   Popular

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.