Vulnerabilities are detected almost daily and are a real problem. In this case, it was Microsoft who reported a major security problem in its operating system. Windows 10 is present in tens of millions of computers and we now know that it has two critical vulnerabilities. Such vulnerabilities allow malicious attackers to gain remote access to systems.
Windows 10 very recently broke the barrier of 1.000 billion systems with this operating system. It is currently one of the most used in the world and therefore, this vulnerability is very important. Although its condition is critical in Windows 10, this vulnerability would be present in all versions of Windows.
[amazon box="B084TPX5RT"]Two vulnerabilities discovered in Windows
Microsoft has highlighted that these two security problems would have a limited presence, affecting all versions of Windows. The vulnerabilities have to do with the Adobe Font Library. This font analysis tool not only takes care of the management of third-party programs (Adobe Photoshop, Office, etc.) but also affects Windows Explorer. Specifically, it affects the Preview or Details panel prior to opening a file.
This vulnerability occurs when the Adobe Font Library manages fonts specifically designed for different uses. Malicious attackers can run malicious code in the operating system in order to convince the user to open a specific document or preview.
For an operating system running a licensed version of Windows 10, a successful attack would only result in code execution within the context of the AppContainer, where they would have limited privileges and maneuverability.
Indicates Microsoft's statement
Microsoft has not specified whether the vulnerability can be activated remotely or through search engines. Apparently this vulnerability could be exploited, among other things, through the WebDAV client service.
How can we protect ourselves?
Microsoft does not have a security patch yet, although they are working on it and it is expected for Tuesday, April 14. By Microsoft it is recommended:
- Disable the Preview pane and Details Pane feature in Windows Explorer to reduce the risk
- Disable the WebClient service as a preventive measure
- Modify the name or disable ATMFD.DLL temporarily
- Restart the operating system after making these changes
Source: THN
