BleepingComputer.com: Microsoft releases temporary workaround for critical Duqu vulnerability

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Microsoft releases temporary workaround for critical Duqu vulnerability

#1 User is offline   Union_Thug 

  • Bleepin' with the fishes
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,312
  • Joined: 30-August 09
  • Gender:Male
  • Location:is everything

Posted 04 November 2011 - 05:29 AM

Microsoft releases Security Advisory 2639658 http://blogs.technet.com/b/msrc/archive/2011/11/03/microsoft-releases-security-advisory-2639658.aspx

Quote

Today we released Security Advisory 2639568 to provide customer guidance for the Windows kernel issue related to the Duqu malware. I would like to provide you information on how to protect your system(s), how we are addressing the issue, and insight into our threat landscape monitoring capabilities. The security advisory provides a workaround that can be applied to any Windows system. To make it easy for customers to install, we have released a Fix it that will allow one-click installation of the workaround and an easy way for enterprises to deploy.

To further protect customers, we provided our partners in the Microsoft Active Protections Program (MAPP) detailed information on how to build detection for their security products. This means that within hours, anti-malware firms will roll out new signatures that detect and block attempts to exploit this vulnerability. Therefore we encourage customers to ensure their antivirus software is up-to-date.

Additionally, our engineering teams determined the root cause of this vulnerability, and we are working to produce a high-quality security update to address it. At this time, we plan to release the security update through our security bulletin process, although it will not be ready for this month’s bulletin release.


Microsoft Security Advisory (2639658) Vulnerability in TrueType Font Parsing Could Allow Elevation of Privilege
http://technet.microsoft.com/en-us/security/advisory/2639658

Microsoft Security Advisory: Vulnerability in TrueType font parsing could allow elevation of privileges (Fix-it)
http://support.microsoft.com/kb/2639658

This post has been edited by Union_Thug: 04 November 2011 - 05:34 AM


#2 User is offline   Winterland 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 168
  • Joined: 07-July 10
  • Gender:Male
  • Location:The Great Commonwealth of Virginia

Posted 04 November 2011 - 06:35 AM

> bows <

Thank you Thug.

Winterland

#3 User is offline   Union_Thug 

  • Bleepin' with the fishes
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,312
  • Joined: 30-August 09
  • Gender:Male
  • Location:is everything

Posted 13 December 2011 - 11:47 PM

MS issued MS11-087 to address the above. If you installed Microsoft Fix it 50792, disable the Fix it.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users