Microsoft notified me that they will release an emergency security patch later today.

Thursday October 23rd, 17:00 GMT (That is 19:00 for GMT+1+summertime)

All Microsoft said is that the vulnerability can be remotely exploited by malware.

Microsoft advices every Windows user / administrator to update their machines

Every currently supported Windows version is affected, so:

Windows 2000, Windows XP, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows 2008, 2008 Core.

I'm not sure if all editions are affected, but it does look like it, so also Windows Embedded? Windows CE ? 2008 Core installation? Hyper-V Server?

To my knowlegde this is only the second time that Microsoft has released an out of band security patch.

UPDATE: now posted: http://www.microsoft.com/technet/security/bulletin/ms08-oct.mspx

Send via e-mail | Submit to Digg | Add to Live Favorites