Microsoft has released patches for two security holes that primarily affect Windows NT and 2000, including operating systems and servers. One of the vulnerabilities also affects Windows XP, the software firm said.
While they could allow intruders access to systems or the ability to run code, Redmond, Washington-based Microsoft called both security gaps "moderate risks" and offered patches for them.
SecurityFocus senior threat analyst Ryan Russell told NewsFactor that one of the vulnerabilities -- an unchecked buffer in the Multiple Uniform Naming Convention Provider that affects Windows NT, 2000 and XP -- could be a serious problem.
"This one's a little troublesome, because it can overcome measures that you've put in place and it is providing an avenue for malicious code," he said, referring to the dangers of computer worms.
|