Welcome Guest. | Log In| Register | Membership Benefits

  • Email this page E-mail
  • |  Print Print
  • |   Bookmark and Share
  • icon

Is SP2 Vulnerable?


Microsoft refutes Russian company's claim, yet will continue to research it



Microsoft is researching a possible vulnerability that a little-known Russian company claims resides in Microsoft Windows Service Pack 2, but says early analysis indicates there isn't a problem.

The Russian company, Positive Technologies, says it has found a way to bypass service-pack technologies known as data-execution protection and heap-overflow protection, which guard against certain types of worm and hacker attacks. Released in August, the service pack was designed to secure Windows XP.

According to its early analysis, "an attacker cannot use this method by itself to attempt to run malicious code on a user's system," Microsoft said in a statement.

Meanwhile, Microsoft plans to release several software patches on Tuesday. Security bulletins to be issued this week are for applications such as Microsoft SharePoint, .Net Framework, Microsoft Office, and Visual Studio, as well as Windows, Media Player, and MSN Messenger.



Subscribe to RSS


Advertisement






Get InformationWeek in Print

Apply for a free 52-week subscription to InformationWeek (a $199 value)



NOTE: Offer valid for U.S., U.S. possessions, & Canada only.