The company uses a four-step scoring system, where "low" is the least-dangerous threat, followed in ascending order by "moderate," "important" and "critical." Microsoft rated the vulnerabilities on Windows 2000 and XP as "important" on Windows 2000, and as "low" on XP.
a successful attack requires a sustained flood of specially crafted TCP packets, and the system will recover once the flood ceases." "A system would become unresponsive due to memory consumption. "Windows XP SP2 and later operating systems include a stateful host firewall that provides protection for computers against incoming traffic from the Internet or from neighboring network devices on a private network."Īlthough the two bugs can be exploited on Windows 2000 and XP, Microsoft downplayed their impact. "By default, Windows XP SP2, Windows XP SP3 and Windows XP Professional 圆4 Edition SP2 do not have a listening service configured in the client firewall and are therefore not affected by this vulnerability," the company said. In the revised advisory, Microsoft explained why it won't patch Windows XP, the world's most popular operating system. Only two of the trio affect Windows Server 2000 and Windows XP, Microsoft said in the accompanying advisory, which was refreshed on Thursday. All three of the vulnerabilities highlighted in the MS09-048 update were patched in Vista and Server 2008. The bugs in question are in Windows' implementation of TCP/IP, the Web's default suite of connection protocols. Last Tuesday, Microsoft said that it wasn't patching Windows 2000 because creating a fix was "infeasible." "An update for Windows XP will not be made available," Stone and fellow program manager Jerry Bryant said during the Q&A portion of the Webcast ( transcript here).
0 kommentar(er)
