Windows Hole Could Be Used By Dishonest Employees

It doesn't happen often, but when it does it gets the attention of the security world. Microsoft on Thursday issued an out-of-band patch designated as critical for Windows XP and older versions, and important for Windows Vista.

MS08-67 resolves a vulnerability in the server service that affects all currently supported versions of Windows. Because the vulnerability is potentially wormable on older versions of Windows, Microsoft is encouraging customers to test and deploy the update as soon as possible.

Microsoft discovered the vulnerability as part of its research into a limited series of targeted malware attacks against Windows XP systems. Researchers found attackers were using a new vulnerability that was potentially wormable. The company planned a Webcast on Friday to discuss the release.