TweakTown
Tech content trusted by users in North America and around the world
5,912 Reviews & Articles | 38,077 News Posts

Microsoft release an emergency Windows 7 update, just before the end of the year

Microsoft issues an update to Windows, fixes a vulnerability in the .NET Framework

| Operating Systems News | Posted: Dec 30, 2011 11:21 am

Microsoft have released a rare out-of-band update to fix a vulnerability in the .NET Framework. The update comes weeks before the next regularly scheduled "Patch Tuesday" in mid-January, and addresses a flaw that could allow attackers to exploit hash tables to perform a denial-of-service (DoS) attack against a website built with Microsoft's ASP.NET application framework.

 

TweakTown image news/2/2/22081_01_microsoft_release_an_emergency_windows_7_update_just_before_the_end_of_the_year.jpg

 

DoS attacks usually require thousands of malware-controlled systems in a botnet to overwhelm a site with requests. This opening would allow an attacker to cripple a vulnerable site by sending a certain type of HTTP request. Each of these requests would consume 100-percent of one CPU core. As you can imagine, the more of these requests, the more CPU power that is zapped away.

 

Microsoft says "Attacks targeting this type of vulnerability are generically known as hash collision attacks." They also added that the problem is not specific to Microsoft's Web services as it affects PHP 5, Java, .NET, v8 and even PHP 4, Ruby and Python. The people behind these platforms will release updates soon, but the holidays will dampen these efforts.

NEWS SOURCE
Techspot.com

Related Tags

Further Reading: Read and find more Operating Systems news at our Operating Systems news index page.

Do you get our news RSS feed? Get It!

Post a Comment about this news

Latest Tech News Posts

View More News Posts

TweakTown Web Poll

Question: Facebook's acquisition of Oculus VR will...

Improve Oculus Rift Development

Hamper Oculus Rift Development

Completely destroy Oculus Rift Development

Let's wait and see, I'm not sure

or View the Results

View More Polls

Forum Activity

View More Forum Posts

Press Releases

View More Press Releases