Microsoft on Friday acknowledged that "detailed exploit code" for a critical Windows vulnerability has been published on the Internet, and issued a security advisory to help users who haven't been able to patch.
Although the Redmond Wash. developer issued a security update -- MS06-025 -- on June 13 to fix the flaw in Windows' Routing and Remote Access (RRA) service, unpatched systems are at risk because of the new exploit code.
The exploit, which was published by H.D. Moore on at least one Web site and added to the Metasploit framework Thursday, ups the threat Microsoft's advisory said.
|