It could be one of the oldest bugs in the computer world.
Microsoft today issued a patch for a major security hole in its Windows software that it admitted has been there for 19 years.
Experts at IBM spotted the bug - and found it was even present in the code for Windows 95.
IBM's
cybersecurity research team discovered the bug in May, describing it as a
'significant vulnerability' in the operating system.
'The
buggy code is at least 19 years old and has been remotely exploitable
for the past 18 years,' IBM X-Force research team said in its blog on
Tuesday.
The
bug, which is present in every version of Microsoft Windows from
Windows 95 onward, allows an attacker to remotely take over and control a
computer.
'We
reported this issue with a working proof-of-concept exploit back in May
2014, and today, Microsoft is patching it,' they said.
'It can be exploited remotely since Microsoft Internet Explorer (IE) 3.0.
'This complex vulnerability is a rare, 'unicorn-like' bug found in code that IE relies on but doesn't necessarily belong to it.
No comments:
Post a Comment