Microsoft warns of new security perils
Microsoft was hit with a pair of unwelcome security reports on Thursday. The company released a fix for a vulnerability in Windows Server 2000 shortly before a security researcher posted details about a new flaw in Windows 7.
Researcher Laurent Gaffie said that the vulnerability could cause a denial of service, crashing the targeted machine by executing an infinite loop.
The flaw is said to exist in the server message block (SMB) component of Windows 7. Gaffie suggested that the vulnerability could be triggered through Internet Explorer and could allow an attacker to bypass firewall protections. In reporting the details on the vulnerability, Gaffie took time to mock Microsoft's security policies, namely its secure development lifecycle (SDL) programme.
