Windows Print Spooler Flaws Lead to Code Execution
https://threatpost.com/windows-print-spooler-flaws-lead-to-code-execution/119238/
Researchers at Vectra Networks today disclosed some details on
the vulnerability, but did not publish their proof-of-concept
code. The flaw, CVE-2016-3238, affects all supported versions
of Windows, and allows an attacker to install and execute a
driver that acts essentially as a wrapper for malicious code,
said Vectra chief security officer Gunter Ollmann.
- - -
Of course, there are no patches for XP, since MS no longer considers
it to exist. The flaw appears relevant for corporate or other
environments with shared printers on their local networks, less
relevant to typical home users. Small businesses will tend to fall
in-between.
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
