Microsoft Urges Users to Wait for Official Patch

Some security researchers are advising Windows users to rush to install an unofficial patch to fix a vulnerability in the way the OS renders graphics files, but Microsoft wants customers to wait another week for its official security update, it announced Tuesday.

The problem is in the way various versions of Windows handle graphics in the WMF (Windows Metafile) format. When a vulnerable computer opens a maliciously crafted WMF file, it can be forced to execute arbitrary code. Microsoft published a first security advisory on December 28, saying it had received notification of the problem on December 27 and was investigating whether a patch was necessary.

On Tuesday, Microsoft updated the advisory to say it has completed development of its own patch, and is now testing it for release next week.

The number of users potentially at risk is high, with all versions of Windows exhibiting the vulnerability, but the number actually affected so far is relatively low, researchers say. Full Story…

Be Sociable, Share!

    Share This Post

    Recent Articles

    Leave a Reply

    © 2017 . All rights reserved. Site Admin · Entries RSS · Comments RSS
    Powered by WordPress · Designed by Theme Junkie