Microsoft: Critical worm hole could be exploited within 30 days

spike7451

Just had this posted on my Facebook by Sophos;

http://nakedsecurity.sophos.com/2012/03/14/microsoft-exploit-30-days/?utm_source=facebook&utm_medium=status+message&utm_campaign=naked+security

More info in the link.

John_Gray

There appear to be four Security Updates related to Remote Desktop Protocol in the updates sitting in my PC waiting to be installed, so I don't think we need to panic too much. Anyway, RDP is most likely to be used by companies, who will (we hope!) know about the problem, which has been widely publicised.

catlou

For a novice like me.......

Just read that and thought oh heck, so looked in my system properties the "allow remote assistance invitations......." box was ticked.

That is something that I never use so I have unticked it. In theory should that keep me safe in the meantime?

Thanks!

VoucherMan

Oh the disappointment.

Saw the title and thought Microsoft had branched out into space exploration.

DatabaseError

The patch came out on Tuesday, and should have been automatically added to any machines with updates turned on (that's all of us, right?)
As I understand it, the 30 day warning only exists because the vulnerability is now known about, so some toe-rag will be sat in a bedroom somewhere surrounded by empty redbull cans and 20 sided dice trying to make mischief (and then there will be the more organised who will attempt to make money from this).
Just to be clear - for most people this is not an issue.