Important Windows updates!

[headhawg]

A security flaw in Remote Desktop Services (RDS) is creating the potential for a "worm" exploit. The flaw is bad enough that M$ is releasing a security patch for XP and Server 2003, both of which have been out of support for years.

Computerworld article

[Tom]

Thanks for the heads up, from an XP user!

[headhawg]

Researchers at Mcafee and Zerodium have working "wormable" exploits but have not released any details. As of yet there are no exploits in the wild. If I wasn't clear in my original post this is a Windows 7 exploit as well as one that affects XP and older Server versions. Make sure to patch.

[wilderness]

These are primarily Windows Server patches for machines with XP3 Service Pack and 64-bit machines.

Nothing at all for 32-bit machines.

The only update for a XP2 Service pack was with a 64-bit machine.

It's worth noting that XP-64 updates were available for nearly two years after MS ended support for XP-32.
The primary reason for this was because many of the XP-64 updates were compatible with Win-7.

[headhawg]

Originally Posted by wilderness

These are primarily Windows Server patches for machines with XP3 Service Pack and 64-bit machines.

Nothing at all for 32-bit machines.

The only update for a XP2 Service pack was with a 64-bit machine.

It's worth noting that XP-64 updates were available for nearly two years after MS ended support for XP-32.
The primary reason for this was because many of the XP-64 updates were compatible with Win-7.

You post so much misleading information that you're dangerous. You come off as some kind of smart IT guy, but you're not. From the Computerworld article:

If you’re running Windows XP or Server 2003 (more accurately, Windows XP SP3, Windows Server 2003 SP2, Windows XP Professional x64 Edition SP2, Windows XP Embedded SP3, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009 — which, yes, probably includes your aging cash register), you need to manually download and install the patch. The patch you want is called KB 4500331.

People who were concerned read the article and noted the paragraph I quoted. The number of XP64 systems is dwarfed by the number of 32-bit ones. If you're still running XP then likely you have patched it with Service Pack 3 -- and it's 32-bit! So by "nothing at all for 32-bit machines" what you really meant is nearly every XP system still in existence. And, as I also posted, the exploit also affects Win7 machines which still nearly 45%+ of the Windows market just slightly less than Win10.

Go fix your scanner.

[wilderness]

misleading . . .
All you need to do is go to the download page to conifrm what I said.

BTW, I've three machines with XP (two with SP2-32 and the other with SP2-64).
There was only one download applicable SP2-64.

[wilderness]

BTW, not many folks in this forum (besides Tom & myself) with XP's.

[headhawg]

But a lot of people have Win7 so what's your point?

[wilderness]

What's your point! (Rhetorical).

The updates were for XP.

[headhawg]

Apparently you just want to be a PITA and not read the article.

In short, if you have a PC that runs any of these:

• Windows XP (including Embedded)
• Windows Server 2003, Server 2003 Datacenter Edition
• Windows 7
• Windows Server 2008, Server 2008 R2

You need to get patched now. Tell your friends.

Clear enough now?

[Partsnut]

headhawg, Thanks for the heads up. Your information helped improve my XP computer,

[headhawg]

It looks like the exploit is about to become a reality as the tech docs have been posted on GitHub. If your computer is vulnerable, remember to patch -- and soon. Ars Technica

[Dave Schwartz]

Originally Posted by headhawg

It looks like the exploit is about to become a reality as the tech docs have been posted on GitHub. If your computer is vulnerable, remember to patch -- and soon. Ars Technica

This is still just about XP, right?

[headhawg]

Not just XP, Dave. Win7 on the workstation side, and also Server 2003 and 2008. The confusion might be from post #5 which gives the link for the XP and Server 2003 patches, OSes that are not officially supported. You use the regular Windows Update process for 7 and 2008, so these will be patched during the normal monthly rollup. If for some reason people aren't, here is the direct link to the security patches -- M$ link

[headhawg]

BlueKeep now for sale. ZDNet article