Microsoft releases a new fix for Windows Malware Protection Engine bug

The bug in Malware Protection Engine was discovered by the UK's National Cyber Security Centre.

    Microsoft has released a security patch to fix a flaw in its Windows Malware Protection Engine that, if left untreated, can exploit a memory corruption error in the malware scanning tool and hack your system.

    Microsoft releases a new fix for Windows Malware Protection Engine bug

     

    The bug in Malware Protection Engine was discovered by the UK's National Cyber Security Centre. The vulnerability (CVE-2017-11937) can affect systems running Windows 7, 8.1, 10 and Server 2016.

    A similar flaw was found by Tavis Ormandy, security researcher for Google's Project Zero, in June this year. "According to Microsoft, the vulnerability can be triggered when the Malware Protection Engine scans a downloaded file to check for threats," The registrar reported. In many systems, this happens automatically for all new files. Microsoft recommends all users to immediately install the new security patch.

    "There are many ways that an attacker could place a specially crafted file in a location that is scanned by the Microsoft Malware Protection Engine. For example, an attacker could use a website to deliver a specially crafted file to the victim's system that is scanned when the website is viewed by the user," the company said in its advisory FAQ.

    An attacker could also deliver a specially crafted file via an email message or in an Instant Messenger message that is scanned when the file is opened. "In addition, an attacker could take advantage of websites that accept or host user-provided content, to upload a specially crafted file to a shared location that is scanned by the Malware Protection Engine running on the hosting server," Microsoft noted.

    Source: IANS

    Read More About: microsoft windows computers news
    Opinion Poll
    X

    Stay updated with latest technology news & gadget reviews - Gizbot

    Notification Settings X
    Time Settings
    Done
    Clear Notification X
    Do you want to clear all the notifications from your inbox?
    Yes No
    Settings X
    We use cookies to ensure that we give you the best experience on our website. This includes cookies from third party social media websites and ad networks. Such third party cookies may track your use on Gizbot sites for better rendering. Our partners use cookies to ensure we show you advertising that is relevant to you. If you continue without changing your settings, we'll assume that you are happy to receive all cookies on Gizbot website. However, you can change your cookie settings at any time. Learn more