A second out-of-band patch issued this week addresses a denial-of-service vulnerability in Microsoft Defender.
Microsoft this week released two emergency security patches: one to fix a zero-day remote code execution flaw in Internet Explorer (CVE-2019-1367), and another to address a denial-of-service (DoS) vulnerability in Microsoft Defender, which was not previously known or exploited.
The latter, CVE-2019-1255, was discovered by Charalampos Billinis of F-Secure Countercept and Wenxu Wu of Tencent Security Xuanwu Lab. A vulnerability exists when Microsoft Defender, an anti-malware feature built into Windows, improperly handles files. An attacker could exploit this to prevent legitimate accounts from executing legitimate system binaries, Microsoft says. To exploit the DoS vulnerability, an attacker would first require execution on the target system.
This week's patch alters the way Microsoft Defender handles files. The last affected version of the Microsoft Malware Protection Engine is Version 1.1.16300.1, and the first version with the vulnerability addressed is Version 1.1.16400.2. Since the Malware Protection Engine is automatically updated, Microsoft says no action is required to install the latest update. Users who don't want to wait for the update can manually update their anti-malware software.
Read more details here.
Check out The Edge, Dark Reading's new section for features, threat data, and in-depth perspectives. Today's top story: "'Playing Around' with Code Keeps Security, DevOps Skills Sharp."
About the Author(s)
You May Also Like
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
April 4, 2024Cybersecurity Strategies for Small and Med Sized Businesses
April 11, 2024Defending Against Today's Threat Landscape with MDR
April 18, 2024Securing Code in the Age of AI
April 24, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Black Hat Asia - April 16-19 - Learn More
April 16, 2024