Microsoft Releases 'Fix It' for DLL Hole
After revealing that hundreds of Windows applications may be at risk of attack from malicious hackers using rogue dynamic link libraries (DLL), Microsoft has released a "Fix It" solution meant to ameliorate the problem.
Fix Its are automated tools from Microsoft (NASDAQ: MSFT) that tweak settings or repair problems -- sometimes security flaws -- that users encounter. Microsoft debuted the Fix It Button technology last year, enabling users to choose to automatically install a bug fix by clicking on a button instead of manually installing it themselves.
However, the latest Fix It -- in combination with a separate tool that Microsoft provided last month -- serves merely to block most of the newly emerged DLL attacks: It does not address the underlying problem, which according to Microsoft, actually has to do with poor programming practices.
