Some of Our Sources
- Techcrunch
- Spoon Graphics
- Fuel Your Creativity
- Noupe
- Web Design Ledger
- Reencoded
- Wal You
- Specky Boy
- Willems Lab
- Dev To
Help Webnuz
Referal links:
July 13, 2016 12:00 am
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/KW5qa9_CKsU/vulnerability-exploitable-via-printer-protocols-affects-all-windows-versions
Vulnerability Exploitable Via Printer Protocols Affects All Windows Versions
An anonymous reader writes from a report via Softpedia: "Microsoft patched today a critical security vulnerability in the Print Spooler service that allows attackers to take over devices," reports Softpedia. "The vulnerability affects all Windows versions ever released. [Security firm Vectra discovered the vulnerability (CVE-2016-3238), which Microsoft fixed in MS16-087.] At its core, the issue resides in how Windows handles printer driver installations and how end users connect to printers. By default, in corporate networks, network admins allow printers to deliver the necessary drivers to workstations connected to the network. These drivers are silently installed without any user interaction and run under the SYSTEM user, with all the available privileges." An attacker can hack printers and replace these files with his own. The vulnerability is exploitable from both the local network, but also from the internet, thanks to protocols like Internet Printing Protocol or the webPointNPrint. The exploit can be delivered via ads or JavaScript code inside a compromised website. The vulnerability is actually an OS design issue and affects all Windows versions ever released. Microsoft also announced today plans to make its recently renamed Windows 10 Enterprise product available as a subscription for $7 per user per month, or $84 per year.at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/KW5qa9_CKsU/vulnerability-exploitable-via-printer-protocols-affects-all-windows-versions
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot