Microsoft Fixes Critical Remote Desktop Flaw, Blocks Worm Malware

Microsoft Patches 'Wormable' Flaw in Windows XP, 7 and Windows 2003

For more on this, read our companion article dealing with the potential consequences, affected systems and mitigations for this remote, "wormable" Windows vulnerability.

No exploitation of the vulnerability has been spotted so far, Microsoft claimed, although hackers are likely to create an exploit for it and include it in their malicious programmes in near future.

Windows 7, Windows 2008 and 2008 R2, are vulnerable, along with the even older and out of support Windows Server 2003 and XP variants. The company is also backporting a patch for this vulnerability to versions that are no longer supported, such as Windows 2003 and XP.

The company also stated that PCs running Windows 8 and Windows 10 are not affected by this vulnerability. It explains "Microsoft invests heavily in strengthening the security of its products, often through major architectural improvements that are not possible to backport to earlier versions of Windows". With NLA enabled, systems are protected against "wormable" malware or advanced malware threats that could exploit the vulnerability, as NLA requires authentication before the vulnerability can be triggered.

Separately, Microsoft's regular monthly round of security patches for Windows addresses 22 critical vulnerabilities. Four handle remote code execution vulnerabilties in the Windows dynamic host control protocol (DHCP) server that assigns internet protocol addresses to clients, as well as flaws in the GDI+ graphics rendering component and Microsoft Word. Not so for CVE-2019-0863, an elevation of privilege flaw in Windows Error Reporting (WER) deals with files, which Microsoft says is being used by crooks to fully compromise infected machines.

'Bond 25' production 'halted after Daniel Craig suffers injury on set'
Last month , it was revealed that Rami Malek ( Bohemian Rhapsody ) would be taking up the post of the movie's central villain. Helmed by Cary Fukunaga ( Maniac ), the film will open with James, not on active duty at MI6, kicking back in sunny Jamaica .

"An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights", Microsoft said in the vulnerability advisory.

Microsoft had already released a patch for the flaw, but many older and vulnerable OSes were never updated.

The latter is only a partial mitigation.

The latter, CVE-2019-0725, is a particularly nasty memory corruption vulnerability, since all that is needed to exploit it is a well-crafted packet sent to a DHCP server and affects all now supported versions of Windows, client and server.

Windows 10 Mobile will go out of support in December this year, which means this month's Cumulative Update is one of the last few coming to the OS.

Related News:

  • Jimmy Carter Breaks Hip, Recovering After Surgery

    Jimmy Carter Breaks Hip, Recovering After Surgery

    Carter has had some health issues in recent years. "He was in such good spirits when we spoke last month - he will be fine!" He continues to hold Sunday School in Georgia , and visits Habitat for Humanity projects across the country.
    Marcus Stroman Argues With Manager After Getting Pulled

    Marcus Stroman Argues With Manager After Getting Pulled

    Chicago scored all five of its runs in the fourth inning, thanks to Alonso's two-run home run and a three-run shot by Anderson. Grichuk's two-out blast in the first inning was his sixth of the season and came off starter Dylan Covey (0-2).
    'Arthur' Character Mr Ratburn Comes Out And Gets Married In Latest Episode

    'Arthur' Character Mr Ratburn Comes Out And Gets Married In Latest Episode

    Everyone's favorite PBS kids' show Arthur surprised many fans when it revealed a major change for one of its characters. Cut to the dance floor, where Buster approaches his friends with a plate of "the best cake I've ever had", a nod to Mr.
  • 'Game of Thrones' Creators to Kick Off Next 'Star Wars' Trilogy

    'Game of Thrones' Creators to Kick Off Next 'Star Wars' Trilogy

    If you're not happy with the way " Game of Thrones " is ending and you're a " Star Wars " fan, well, step away from the computer. Disney said that Weiss and Benioff's films would be separate from the classic Skywalker Saga and Rian Johnson's new trilogy.
    President Trump speaks out against Mueller probe as Barr assigns investigator

    President Trump speaks out against Mueller probe as Barr assigns investigator

    Barr angered Democrats last month when he echoed language used by Trump's allies in saying he shared concerns about "spying" on Trump's campaign.
    Donald Trump Jr. Agrees to Senate Committee Interview

    Donald Trump Jr. Agrees to Senate Committee Interview

    Donald Trump Jr ., the president's eldest son, has reached a deal to testify before the Senate Intelligence Committee next month. The deal comes after the panel subpoenaed Trump Jr to discuss answers he gave the panel's staff in a 2017 interview.
  • Viral Video captures police shooting of Black woman who yells she’s pregnant

    Viral Video captures police shooting of Black woman who yells she’s pregnant

    Police said as the officer has handcuffing the woman, she was able to grab the Taser away from the officer and tased him. According to The Associated Press , police said that they will determine whether she was pregnant during the autopsy .
    Felicity Huffman pleads guilty in college admissions scandal

    Felicity Huffman pleads guilty in college admissions scandal

    Loughlin and Giannulli, who are also charged with money laundering conspiracy, have not publicly commented on the allegations. At the trial, Huffman reportedly said "Yes, your honor", when asked if she was "pleading guilty of (her) own free will".
    Antoine Griezmann Confirms He's Leaving Atletico Madrid

    Antoine Griezmann Confirms He's Leaving Atletico Madrid

    Since joining Atletico from Real Sociedad in 2014, Griezmann has registered 133 goals and 50 assists in 256 games for the club. Antoine Griezmann has confirmed he is leaving Atletico Madrid in a video posted to the club's official Twitter account.
  • Burmese pilot lands plane on rear wheels after landing gear jams

    Burmese pilot lands plane on rear wheels after landing gear jams

    Heart in mouth, bystanders were able to film the miraculous emergency landing which was safely - if not gracefully - performed. Ground staff watched on alarmed as the Embraer 190 had been circling the airport with only two set of landing gear deployed.
    Kim Kardashian and North West make 'Old Town Road' music video

    Kim Kardashian and North West make 'Old Town Road' music video

    While Yeezus and Rob have been high contenders in her fans' minds, Kim might have already revealed the name on Twitter . His name is bear , noel??? "Teddy west? Theodore west?" If this is the name they've gone for, Cheryl won't be too happy.
    How major U.S.  stock indexes fared Tuesday

    How major U.S. stock indexes fared Tuesday

    Higgins cited the previous inversion last month, when the three-month Treasury yield topped that of the 10-year, spooking markets. The escalation hit stock markets, with Asia markets falling on Tuesday after Wall Street closed with sharp losses.


Most liked

How much coffee is too much?
The study's authors analyzed dietary patterns and health records of almost 350,000 participants between ages 37 and 73. Researchers discovered that keeping coffee consumption under six cups per day was unlikely to affect heart health.

Course familiarity could give Tiger Woods edge in upcoming majors
Confidence, maybe even cockiness, could be a key intangible as players try to inherit the mindset of these brazen galleries. Senior Open previous year , but he regularly uses one on the Champions Tour for players 50 and over.

At least 1 Muslim killed in riots: Sri Lankan minister
Ruwan Gunasekera, a police spokesman, said that more than 80 people were in custody as of Tuesday evening. Police and troops fought off hundreds of rioters in at least six towns earlier Monday with teargas.

Huawei offers to sign a no-spy agreement with governments
Furthermore, concerns about Chinese law requiring Huawei to cooperate with China's intelligence agencies were simply hype. Liang, however, said economic factors should be part of the decision, and politics should be taken out of it.

Don't force democracy on Venezuela, Russia tells US
And as you mentioned before, I mean, the origin of this meeting today was that phone call that Trump and Putin had. But the Europeans said they are fearful about the behaviour of both Iran and the Trump Administration.

Jeremy Kyle Show axed forever
She said: "I suffered with anxiety and depression after being on the show, you come off the stage just feeling really very bad ". The Prime Minister said she was "deeply concerned" over reports of the death of Stephen Dymond, The Sun says.

Leeds fans sing a new chant aimed at Frank Lampard
The referee gave it, but the linesman has decided it was clear enough to not be a penalty. It was an extremely tight call, but it appears the linesman may have been correct.

'You're too short to talk': Ronaldo trolls Roma's Florenzi
Surprise package Atalanta climbed to third with 65 points thanks to a 2-1 home win over relegation-threatened Genoa. Claudio Ranieri's Roma move to within a point of fourth-placed Inter Milan , who host Chievo on Monday.

More details of Android Q Desktop Mode unveiled by Google
The new Android Q will also be well equipped to ensure continuity of the screen with foldable screens of Android devices. The devices have up to $600 in incentives to get users to trade in iPhone and other devices to get the new smartphone.

Amazon offers to help employees start delivery business
One of them is run by Milton Collier, a freight broker who started his business in Atlanta about eight months ago. Collier says his business is already preparing for the one-day shipping goal by looking for more workers.

Thousands of People March for Palestine in London
Israeli officials say that the return of Palestinian refugees and their descendants would destroy Israel's Jewish character. Israel and terror groups in Gaza have fought three wars in the past eleven years and numerous smaller skirmishes.

Alabama Senate bans almost all abortions, including rape cases
Gretchen Whitmer is expected to veto the legislation, which can not go to her desk until next week at the earliest. Supporters said the bill is intentionally created to conflict with the US Supreme Court's landmark 1973 Roe v.

Oil prices jump on drone attack on Saudi Aramco facilities
The UAE asked the United States to help investigate the damage , which Gulf officials have characterised as sabotage. The Israeli sources noted that the Iranian target list does not rule out civilian targets and ports in the area.

Lewis Hamilton: Spanish GP 1-2 an "incredible day" for Mercedes
At the moment, I'm just enjoying driving with this team . "People watching might be unhappy with the gap we have to the Ferraris". However, Vettel went in a bit too hot and was forced to brake hard, flat spotting his front right tyre.

Disney takes over Hulu streaming service
With Disney now wielding full operational control over Hulu , it's unclear how the Hulu and Disney+ symbiosis will play out. Disney's $71.3 billion takeover of 21st Century Fox combined their stakes, and gave Disney a majority hold over Hulu .