Microsoft Releases 16 Updates to Resolve Bugs in Windows, Office

15 May, 2019, 11:22 | Author: Sammy Rose
  • Microsoft Patches 'Wormable' Flaw in Windows XP, 7 and Windows 2003

An estimated 3 million Remote Desktop Protocol endpoints are now exposed to the internet, according to security researcher Kevin Beaumont, citing data from device search engine Shodan.

Patch Tuesday It's that time of the month again, and Microsoft has released a bumper bundle of security fixes for Patch Tuesday, including one for out-of-support operating systems Windows XP and Server 2003. This vulnerability, the company said in a blog post, propagates in a way that's similar to the WannaCry ransomware from two years ago. (Old hardware can run very nice versions of Linux, which cost nothing.) And if you're one of those stick-in-the-muds still running Windows 7, you have eight months to update those machines to Windows 10.

Windows 7, Windows 2008 and 2008 R2, are vulnerable, along with the even older and out of support Windows Server 2003 and XP variants. "The security update addresses the vulnerability by correcting how Skype for Android answers incoming calls", Microsoft says, adding that exploitation is less likely.

"Microsoft invests heavily in strengthening the security of its products, often through major architectural improvements that are not possible to backport to earlier versions of Windows". This measure would stop worms as long as attackers don't have valid credentials for authentication on vulnerable systems.

Separately, Microsoft's regular monthly round of security patches for Windows addresses 22 critical vulnerabilities.

Vijay Singh withdraws from PGA Championship
But the field will also be unique because it will include one competitor moving about the course in a golf cart. Daly has arthritis in his right knee and he requested to be allowed to use a cart because of medical issues.


QUIZ: How Well Do You Remember The 2018/19 Premier League Season?
UEFA have been investigating evidence first uncovered in a series of leaks published by the German newspaper Der Spiegel in 2018. But it is understood UEFA would deem a season-long ban to be suitable punishment if City are found guilty.


Four Louisiana officers in President Trump's motorcade crash on interstate
At least two officers could be seen laying on the ground, injured, according to reporters traveling in the press vehicle . Donald Trump motorcade was involved in a road accident while the president was traveling in Louisiana on Tuesday.


The company urged users to download the latest Windows update for the affected systems, which fixes a critical remote code execution vulnerability in the Remote Desktop Services process. Not so for CVE-2019-0863, an elevation of privilege flaw in Windows Error Reporting (WER) deals with files, which Microsoft says is being used by crooks to fully compromise infected machines.

"An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights", Microsoft said in the vulnerability advisory.

RIDL and Fallout can be exploited via unprivileged code such as shared cloud computing resources and Javascript on malicious websites or in ads.

As always, users are recommended to install these security updates as soon as possible, and to prioritize the patches targeting flaws already being exploited out in the wild. They can be found in the source link below, near the end of the page.

Fixing the MDS side-channel vulnerabilities will require micro-code updates from Intel for processors, along with updates to operating systems and hypervisors.

Recommended:

  • Madonna Defends Decision to Perform at Eurovision in Israel

    Madonna Defends Decision to Perform at Eurovision in Israel

    On Monday, 58 Palestinian women artists shared an open letter asking Madonna not to proceed with the Eurovision performance. But there have been calls for performers and broadcasters to boycott the competition over Israel's human rights record.
    Iran Claims Credit for UAE, Saudi Ship Attacks

    Iran Claims Credit for UAE, Saudi Ship Attacks

    This followed a U.S. decision to end exemptions from sanctions for major importers of Iranian oil. Iran dismissed the allegation that it could be targeting maritime traffic as nonsense.
    China fires back at USA  with tariff hike on goods worth $60bn

    China fires back at USA with tariff hike on goods worth $60bn

    The president also ordered tariffs to be raised on all remaining U.S. imports from China, which are valued at around $300 billion. On Monday, the Dow Jones Industrial Average fell 2.4% and the tech-heavy Nasdaq lost 3.4% for its biggest drop of the year.
  • Cops: Traveling Serial Killer Struck 3 Times in 3 Weeks

    Cops: Traveling Serial Killer Struck 3 Times in 3 Weeks

    Wright is being held without bond at the Southwest Virginia Regional Jail as a joint investigation and recovery effort continues. Drew Exposition, the carnival traveling up and down the East Coast where Newman said Wright worked as a subcontractor.
    Redmi K20 key specifications revealed via listing ahead of launch

    Redmi K20 key specifications revealed via listing ahead of launch

    The Redmi GM has also confirmed that the Redmi flagship will launch with Android Q beta update similar to the OnePlus 7 Pro. On Monday, the Redmi General Manager Lu Weibing took to Weibo to tease the name of the highly anticipated flagship device.
    Alabama to be No. 8 seed in NCAA softball tournament

    Alabama to be No. 8 seed in NCAA softball tournament

    The Wildcats are a No 14 seed and will open the tourney following the Illinois-Virginia Tech contest in the opener at noon. They have qualified for one Super Regional in program history after hosting a regional in the 2014 season.
  • Indian siblings top Sunday Times rich list

    Indian siblings top Sunday Times rich list

    His fortune has been estimated at £950m - the first time in 17 years that Sir Philip has not been listed as a billionaire. British citizens Sri, 83, and Gopi, 79, who are based in London , are two of the four brothers controlling the empire.
    'Star Wars' movie in 2022 will come from 'Game of Thrones' creators

    'Star Wars' movie in 2022 will come from 'Game of Thrones' creators

    Weiss, but that there may also be a third live-action TV series extension of the franchise in the works. Star Wars: The Rise of Skywalker opens up December 20th, 2019, wrapping up the trilogy that J.J.
    Kang rallies for Byron Nelson victory

    Kang rallies for Byron Nelson victory

    Koepka has four consecutive birdies late in his second round, then started Saturday with birdies on the first two holes. I told him, just keep telling me about the amusing things and that I can laugh and forget about the golf for a while.
  • Sri Lanka government orders nationwide curfew for second night

    Sri Lanka government orders nationwide curfew for second night

    Muslims make up around 10 percent of Buddhist-majority Sri Lanka's population and Christians about 7.6 percent. Police spokesman Ruwan Gunasekera rejected allegations that police had stood by while the violence unfolded.
    Jedinak's Villa through to play-off final after shootout win over West Brom

    Jedinak's Villa through to play-off final after shootout win over West Brom

    Villa booked their place in the play-off final after going all the way to a penalty shoot-out against Albion. Leeds United and Derby are in the other playoff semi-final.
    Jet Airways shares slump after reports of Etihad's non-binding offer

    Jet Airways shares slump after reports of Etihad's non-binding offer

    Shares of the carrier, which have tumbled nearly 70 per cent over the past year, were down 5 per cent at Rs 144.3, as of 0445 GMT. Struggling with a debt of more than $1.2 billion, Jet Airways owes money to lessors, suppliers, pilots and oil companies.


Popular

Stocks, yuan tumble as U.S.-China trade dispute escalates
If China decides to dump their US treasuries, it will result in upward pressure on American interest rates. USA crude fell 0.05% to $61.63 per barrel and Brent was last at $70.81, up 0.27% on the day.

Pompeo to Lavrov: Trump Administration doesn't recognize Russia's attempted annexation of Crimea
A Kremlin aide said the talks had not yielded any breakthrough but had been held in a business-like atmosphere. It is Pompeo's first visit to Russian Federation as secretary of state.

Trump to Ban US Firms From Using Foreign Tech Deemed ‘Security Risk’
Ren Zhengfei, the company's founder and Meng's father, has denied espionage allegations and a link to China's government. The US has restricted federal agencies from using Huawei products and has put pressure on allies to shun them .

The Jeremy Kyle Show dressed guests in hoodies and tracksuits, report claims
Ms Langcaster-James said she turned down an offer to work on the show as she was uncomfortable with its approach. She said this can cause guests distress and wants to see an end to the show and others that rely on humiliation.

Weiner Leaves Halfway House Where Held For Underage Sexting
In 2013, after hiding out for two years, Weiner tried to re-enter politics, this time running for mayor of New York City. Former congressman Anthony Weiner leaves federal court following his sentencing in NY in 2017.

How Much Coffee Is Too Much? A New Study Has the Answer
Authors write that coffee has been connected to a reduced risk of prostate cancer, Alzheimer's disease and Parkinson's disease. Previous research has found coffee is rich in antioxidants and may reduce the risk of heart disease, stroke, and diabetes.

Netflix wants to talk about video games at E3
That's all entirely speculation on my part, but we're extremely curious to see what Netflix actually has in the works. This year's E3 festivities kick off on June 11th and conclude on June 13th at the Los Angeles Convention Center.

Giuliani cancels trip to Ukraine, denounces ‘enemies’ of the United States in Kiev
Adam Schiff insisted Sunday morning that the nation would not survive another four years of President Donald Trump . The President said he hadn't yet spoken to Giuliani about the trip , but that he was interested in the topic.

Google Assistant Finally Arrives on Sonos
This is certainly an interesting use case, but the scenario drives home the importance of providing these choices for customers. Sonos customers can start using Google's voice-activated assistant with their Sonos One and Sonos Beam after a.

SPOILERS ** WWE SmackDown Tapings For Tonight (5/14)
eWrestling.com will be providing play-by-play spoiler results coverage from the taping as it happens live. This was said to be an extremely good match early in the show that really set the tone for the evening.