News

Microsoft releases an emergency Windows 7 update

Microsoft has recently released a fix for a vulnerability in the .NET Framework. This is a rare and out-of-band update that comes weeks before the next regularly scheduled “Patch Tuesday” of mid-January.

This update however, is rather urgent, as it addresses a flaw that could allow attackers to exploit hash tables to perform a denial-of-service (DoS) attack against a website built with Microsoft’s ASP.NET application framework.

Usually, these attacks require thousands of malware-controlled systems in a botnet to overwhelm a site with requests, but this opening would allow an attacker to cripple a vulnerable site by sending a certain type of HTTP request, each consuming 100% of one CPU core, meaning the greater the requests, the higher the number of CPU power gained by the attacker.

“Attacks targeting this type of vulnerability are generically known as hash collision attacks,” said Microsoft.

The company also added that such a flaw is not specific to Microsoft’s Web services, but it also affects PHP 5, Java, .NET, v8 and even PHP 4, Ruby and Python. The people behind these platforms will release updates soon, but the holidays will dampen these efforts.

Source

Andy Ruffell

Disqus Comments Loading...

Recent Posts

Electronic Arts Titles Played for Over 11 Billion Hours in 2024

Electronic Arts (EA) announced today that its games were played for over 11 billion hours…

6 days ago

Just 15% of Steam Gaming Time in 2024 Was Spent on New Releases

Steam's annual end-of-year recap, Steam Replay, provides fascinating insights into gamer habits by comparing individual…

6 days ago

STALKER 2 Gets Massive 110GB Patch With 1800+ Fixes

GSC GameWorld released a major title update for STALKER 2 this seeking, bringing the game…

6 days ago

Intel Unveils Core 200H Processors Based on the Previous Raptor Lake Refresh

Without any formal announcement, Intel appears to have revealed its new Core 200H series processors…

1 week ago

Ubisoft Reportedly Developing a New Quadruple A Game

Ubisoft is not having the best of times, but despite recent flops, the company still…

1 week ago

STALKER 2: Heart of Chornobyl Update 1.1 Fixes 1,800 Issues and Revamps A-Life 2.0

If you haven’t started playing STALKER 2: Heart of Chornobyl yet, now might be the…

1 week ago