Wednesday, April 11, 2018

Windows security: Microsoft patch for Outlook password leak bug 'not a full fix'

The bug, reported by CERT/CC vulnerability analyst Will Dormann in November 2016, was finally fixed in yesterday's Patch Tuesday release. The risk to passwords stems from how Outlook handles RTF email with Object Linking and Embedding (OLE) objects that are hosted on a remote SMB server.

from Google Alert - vulnerability https://ift.tt/2Hffy0A
via IFTTT

No comments:

Post a Comment