Is SP2 Vulnerable? - InformationWeek
IoT
IoT
Software // Enterprise Applications
News
2/4/2005
03:50 PM
50%
50%

Is SP2 Vulnerable?

Microsoft refutes Russian company's claim, yet will continue to research it

Microsoft is researching a possible vulnerability that a little-known Russian company claims resides in Microsoft Windows Service Pack 2, but says early analysis indicates there isn't a problem.

The Russian company, Positive Technologies, says it has found a way to bypass service-pack technologies known as data-execution protection and heap-overflow protection, which guard against certain types of worm and hacker attacks. Released in August, the service pack was designed to secure Windows XP.

According to its early analysis, "an attacker cannot use this method by itself to attempt to run malicious code on a user's system," Microsoft said in a statement.

Meanwhile, Microsoft plans to release several software patches on Tuesday. Security bulletins to be issued this week are for applications such as Microsoft SharePoint, .Net Framework, Microsoft Office, and Visual Studio, as well as Windows, Media Player, and MSN Messenger.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
2017 State of the Cloud Report
As the use of public cloud becomes a given, IT leaders must navigate the transition and advocate for management tools or architectures that allow them to realize the benefits they seek. Download this report to explore the issues and how to best leverage the cloud moving forward.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Join us for a roundup of the top stories on InformationWeek.com for the week of November 6, 2016. We'll be talking with the InformationWeek.com editors and correspondents who brought you the top stories of the week to get the "story behind the story."
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll