Microsoft today confirmed the existence of an unpatched Windows flaw that could allow a remote attacker to crash the system and produce a blue screen.
A specially crafted network packet sent to an affected system could trigger a crash because of a vulnerability in the Server Message Block protocol null pointer dereference in the server driver (srv.sys). Internet Security Systems (ISS) recommends blocking TCP ports 139 and 445 at the perimeter firewall, both inbound and outbound.
|