Microsoft investigates exploit reports for Windows flaw

Share this article:
Soon after Microsoft announced its plans for next week's security update, the software giant disclosed that it was investigating public reports of a Windows privilege-elevation exploit.

The zero-day vulnerability, originally reported in April, impacts Windows XP Professional Service Packs 2 and 3 and could allow users to escalate their privileges to "LocalSystem," according to an updated security advisory released Thursday. These accounts have unrestricted access to local resources.

A Microsoft representative, however, said there are no reports of in-the-wild attacks.

"At this time, we are not aware of attacks attempting to use this vulnerability," Bill Sisk, security response communications manager, wrote on a company blog. "We will continue to monitor the situation."

Users can safeguard themselves against the bug by applying the workarounds listed in the advisory, Sisk said.

A number of next week's scheduled patches will fix issues in Windows, but it is unclear if this particular vulnerability will be addressed.
Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

ISSA tackles workforce gap with career lifecycle program

ISSA tackles workforce gap with career lifecycle program ...

On Thursday, the group launched its Cybersecurity Career Lifecycle (CSCL) program.

Amplification DDoS attacks most popular, according to Symantec

Amplification DDoS attacks most popular, according to Symantec

The company noted in a whitepaper released on Tuesday that Domain Name Server amplification attacks have increased 183 percent between January and August.

Court shutters NY co. selling security software with "no value"

A federal court shut down Pairsys at the request of the Federal Trade Commission.