Security Advisory 981169 Released

    Security Advisory 981169 Released


    Posted: 01 Mar 2010
    Hello again,

    Today we released Security Advisory 981169 to address the VBScript issue involving Windows Help files that we blogged about yesterday. To reiterate what we said in that post, we are not aware of any active attacks at this time and the following operating systems are not affected by this issue: Windows 7, Windows Server 2008 R2, Windows Server 2008, and Windows Vista.

    Our investigation is ongoing. Users on older versions of Windows should review the Security Advisory for mitigations and workarounds for this issue. Additionally, our Security Research & Defense team provides a detailed analysis of the issue and the available workarounds on their blog. User education is a key factor in this scenario given the amount of user interaction required to reach the vulnerability.

    Our teams are working to address the issue and once we complete our investigation, we will take appropriate action to protect customers. This may include releasing an update out-of-band. We will provide further updates as they become available.

    Thanks,

    Jerry Bryant
    Sr. Security Communications Manager Lead

    *This posting is provided "AS IS" with no warranties, and confers no rights.*

    More...
    SGT Oddball's Avatar Posted By: SGT Oddball
    01 Mar 2010



  1. Lee
    Posts : 1,796
    Win 7 Pro x64, VM Win XP, Win7 Pro Sandbox, Kubuntu 11
       #1

    Thanks SGT.
      My Computer


  2. Posts : 6,618
    W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
       #2

    Not surprisingly, they seem to have omitted the most effective "workaround"...not using IE. Opera does not use ActiveX, therefore is not vulnerable to the exploit. To disable all of one's help files in order to defend against this, seems to me to be a significant cost factor to using IE.
      My Computer


 

Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 20:21.
Find Us