Microsoft downplays Windows vulnerability
Microsoft has downplayed a Windows vulnerability affecting its Windows operating systems that could allow remote code execution.
Earlier this week, a proof-of-concept exploit was released but Microsoft suggested it was unlikely that the flaw could be used for remote code execution.
The bug was discovered on the Browser protocol, which runs on top of the server message block (SMB) protocol on Windows. “This vulnerability affects Windows machines that have been configured to use the browser network protocol and then become master browser on the local network,” blogged Mark Wodrich, from the Microsoft Security Response Centre.
