The CERT Coordination Center--an organization that provides Internet security expertise--has received reports of widespread attacks using a recently disclosed security vulnerability and a previously unknown security hole in Microsoft's Windows operating system, the center said Thursday in an advisory.
The known vulnerability is in a Windows interface that handles communications using the RPC (Remote Procedure Call) protocol. That problem affects most supported versions of the Windows operating system and could enable remote attackers to gain total control over vulnerable systems.
Microsoft disclosed the problem and provided a patch for vulnerable systems in a security bulletin July 16 after it was discovered and reported to the company by a Polish security group, Last Stage of Delirium.
|