Beware That Windows Error Message

Microsoft on Thursday warned of a buffer overrun
vulnerability in the way the Windows kernel passes error messages to a
debugger and issued a security patch to plug the holes on Windows NT 4.0,
Windows 2000 and Windows XP systems.

The vulnerability alert included a warning that
an intruder could use the flaw to elevate privileges and a recommendation
that sysadmins running susceptible systems install the patch
immediately.

The vulnerability carries an ‘important’ rating, Microsoft’s second
highest on a four-level scale introduced late last year.

The software giant said the vulnerability exists because an attacker
could write a program to exploit this flaw and run code of his or her choice. “An
attacker could exploit this vulnerability to take any action on the system
including deleting data, adding accounts with administrative access, or
reconfiguring the system,” it cautioned.

For an attack to succeed, an intruder would need to be able to logon
interactively to the system, either at the console or through a terminal
session. A successful attack would also require the introduction of code in
order to exploit this vulnerability.

“Because best practices recommends
restricting the ability to logon interactively on servers, this issue most
directly affects client systems and terminal servers,” Microsoft added.

“Standard best practices recommend only allowing trusted administrators
to log onto such systems interactively; without such privileges, an attacker
could not exploit the vulnerability,” the company said.

RELATED NEWS AND ANALYSIS

• Ethics and Artificial Intelligence: Driving Greater Equality

  FEATURE |  By James Maguire,
  December 16, 2020

• AI vs. Machine Learning vs. Deep Learning

  FEATURE |  By Cynthia Harvey,
  December 11, 2020

• Huawei’s AI Update: Things Are Moving Faster Than We Think

  FEATURE |  By Rob Enderle,
  December 04, 2020

• Keeping Machine Learning Algorithms Honest in the ‘Ethics-First’ Era

  ARTIFICIAL INTELLIGENCE |  By Guest Author,
  November 18, 2020

• Key Trends in Chatbots and RPA

  FEATURE |  By Guest Author,
  November 10, 2020

• Top 10 AIOps Companies

  FEATURE |  By Samuel Greengard,
  November 05, 2020

• What is Text Analysis?

  ARTIFICIAL INTELLIGENCE |  By Guest Author,
  November 02, 2020

• How Intel’s Work With Autonomous Cars Could Redefine General Purpose AI

  ARTIFICIAL INTELLIGENCE |  By Rob Enderle,
  October 29, 2020

• Dell Technologies World: Weaving Together Human And Machine Interaction For AI And Robotics

  ARTIFICIAL INTELLIGENCE |  By Rob Enderle,
  October 23, 2020

• The Super Moderator, or How IBM Project Debater Could Save Social Media

  FEATURE |  By Rob Enderle,
  October 16, 2020

• Top 10 Chatbot Platforms

  FEATURE |  By Cynthia Harvey,
  October 07, 2020

• Finding a Career Path in AI

  ARTIFICIAL INTELLIGENCE |  By Guest Author,
  October 05, 2020

• CIOs Discuss the Promise of AI and Data Science

  FEATURE |  By Guest Author,
  September 25, 2020

• Microsoft Is Building An AI Product That Could Predict The Future

  FEATURE |  By Rob Enderle,
  September 25, 2020

• Top 10 Machine Learning Companies 2021

  FEATURE |  By Cynthia Harvey,
  September 22, 2020

• NVIDIA and ARM: Massively Changing The AI Landscape

  ARTIFICIAL INTELLIGENCE |  By Rob Enderle,
  September 18, 2020

• Continuous Intelligence: Expert Discussion [Video and Podcast]

  ARTIFICIAL INTELLIGENCE |  By James Maguire,
  September 14, 2020

• Artificial Intelligence: Governance and Ethics [Video]

  ARTIFICIAL INTELLIGENCE |  By James Maguire,
  September 13, 2020

• IBM Watson At The US Open: Showcasing The Power Of A Mature Enterprise-Class AI

  FEATURE |  By Rob Enderle,
  September 11, 2020

• Artificial Intelligence: Perception vs. Reality

  FEATURE |  By James Maguire,
  September 09, 2020