Didier Stevens

Friday 9 March 2007

No Microsoft Security Bulletins for March 2007

Filed under: Vulnerabilities — Didier Stevens @ 9:20

Microsoft announced that there are no patches planned for next week’s patch Tuesday.

It will be interesting to see if new zero-days will appear in the coming days. We often see new zero-days just after patch Tuesday. There’s a theory that states that exploit writers do this to maximize the life-time of the exploit. If this theory is correct, we should already see new zero-days appearing between now and Tuesday, because exploit writers won’t have to wait for Tuesday to maximize the life-time of the exploits.

2 Comments »

  1. [...] Didier Stevens wonders if any zero-day exploit will be released this week: It will be interesting to see if new zero-days will appear in the coming days. We often see new zero-days just after patch Tuesday. There’s a theory that states that exploit writers do this to maximize the life-time of the exploit. If this theory is correct, we should already see new zero-days appearing between now and Tuesday, because exploit writers won’t have to wait for Tuesday to maximize the life-time of the exploits. [...]

    Pingback by No Microsoft security patches for March at Security Samizdat — Friday 9 March 2007 @ 9:35

  2. I’ve seen this canned ‘announcement’ dozens of times now. I just wish M$ (and all of their unpaid propagandists) would tell the whole truth. Sure they did not issue any official ‘security’ patches. So imagine my surprise when on that Tuesday I rebooted my machine and had to wait while M$ installed 3 patches… (or were they malware?). When I checked, they appeared legit. Assuming they really were M$ patches, how many times before this has M$ stacked multiple fixes into a patch, millions of times! So I wonder if any of the fixes in these patches had a security aspect.

    Comment by Ron — Tuesday 27 March 2007 @ 5:26


RSS feed for comments on this post. TrackBack URI

Leave a Reply (comments are moderated)

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

The Rubric Theme. Blog at WordPress.com.

Follow

Get every new post delivered to your Inbox.

Join 221 other followers

%d bloggers like this: