Barney's Blog

Blog archive

No Surprise: Exposed XP Flaw Now Exploited

On Monday I told you how Google publicly disclosed an XP Help flaw that had yet to be patched. As of then, there were no reported attacks, but I wondered aloud how long it would take to exploit this now well-known and understood hole.

It didn't take long -- Microsoft now says hackers are now going after the flaw which allows for remote code execution.

Some of you were on Google's side, arguing that Microsoft has no real motivation to fix a hole if no one knows about it. Others believe it is irresponsible to tell hackers how they attack our software. The latter group seems to have some pretty good evidence on their side.

What is your take? Let me know at [email protected].

Posted by Doug Barney on June 18, 2010 at 11:53 AM


Featured

  • Business Connectivity Services Ending for Microsoft 365

    Microsoft plans to block Business Connectivity Services used by Microsoft 365 customers next year, steering them to Power Apps instead.

  • Microsoft Mesh for Teams Coming in October Preview

    A public preview of Microsoft Mesh for Microsoft Teams will arrive next month.

  • Azure Database for MariaDB Ending in 2025

    Microsoft will "retire" its Azure Database for MariaDB service on Sept. 19, 2025.

  • Orgs Now Getting the New Outlook for Windows

    The new Outlook for Windows 11 app is now at the "general availability" release stage for personal users, but it's also "enterprise ready."