Microsoft Security Bulletin

[Wilier]

Microsoft has issued a warning about a critical security flaw that affects most versions of its Windows software.
The flaw involves DirectX, an extensive collection of programming add-ons for Windows used by computer games.
Microsoft have released patches for the affected DirectX version.



Microsoft Security Bulletin MS03 - 030 Unchecked Buffer in DirectX Could Enable System Compromise

Impact of vulnerability: Allow an attacker to execute code on a user’s system

 

[Jonty]

Hmm . . . de ja vu hehe. In fairness the vast majority of these security bulletins are pre-emptive, so no user has actually suffered at the hands of the said problem, but still, it is a little worrying that yet another buffer overrun flaw has been identified Another reason to upgrade to DirectX 9.0b I guess

Kind Regards

 

[Embattle]

*Cough*

http://forums.game.net/showthread.php?s=&threadid=72228

 

[Wilier]

*cough*

 

[Jonty]

Cough drop, anyone?

Kind Regards

 

[Scooba Da Bass]

The reason they are pre-emptive is the groups who have found these major bugs recently have held off on releasing proof of concept code to allow MS to patch.

 

[Jonty]

Microsoft also have their own team of internal, for want of a better word, 'hackers' which try and find vulnerabilities in Microsoft's software for a living. How successful they are, though, never seems to be disclosed.

Kind Regards