Categories: NewsTechWindows

A vulnerability that is already being used to attack the latest versions of Windows will not be patched by now

Microsoft has just make public that has detected that it is exploiting a vulnerability zero-day (that is to say, that has just been discovered and not yet with patch) that affects the latest versions of Windows starting with Windows 7including the versions Server.

This vulnerability is linked to the file atmfd.dllthe library of Adobe Type Manager which allows Windows systems to render the fonts PostScript. For that the attacker can exploit the vulnerability, it is necessary for the user to open any file is specifically designed to run code in remote (or viewing in the preview pane of the Browser).

The vulnerability has been dubbed with the code ADV200006.

Users of Windows 10 does not yet have a patch (and most of the Windows 7 ever will)

The problem faced by Windows users is that it seems that it is not expected that Microsoft will publish in the next few days, no patch until the launch of the next security update, the Patch Tuesday already scheduled for next April 14.

But the problem is even greater for users of Windows 7 and Windows 2008 Servertwo operating systems lacking because of official support by Microsoft. The company will send the patch to those who have contracted the ESU (security updates extended), but has already warned that does not plan to make more exceptions for the rest of the users.

In Engadget

Seven hackers made millionaires ‘hunting’ vulnerabilities in 2019: what are the programs ‘bug bounty’ that make it all possible

And what we can do in the meantime, to mitigate potential attacks? Then take 3 steps very simple: