Microsoft announced that there are no patches planned for next week’s patch Tuesday.
It will be interesting to see if new zero-days will appear in the coming days. We often see new zero-days just after patch Tuesday. There’s a theory that states that exploit writers do this to maximize the life-time of the exploit. If this theory is correct, we should already see new zero-days appearing between now and Tuesday, because exploit writers won’t have to wait for Tuesday to maximize the life-time of the exploits.
[…] Didier Stevens wonders if any zero-day exploit will be released this week: It will be interesting to see if new zero-days will appear in the coming days. We often see new zero-days just after patch Tuesday. There’s a theory that states that exploit writers do this to maximize the life-time of the exploit. If this theory is correct, we should already see new zero-days appearing between now and Tuesday, because exploit writers won’t have to wait for Tuesday to maximize the life-time of the exploits. […]
Pingback by No Microsoft security patches for March at Security Samizdat — Friday 9 March 2007 @ 9:35
I’ve seen this canned ‘announcement’ dozens of times now. I just wish M$ (and all of their unpaid propagandists) would tell the whole truth. Sure they did not issue any official ‘security’ patches. So imagine my surprise when on that Tuesday I rebooted my machine and had to wait while M$ installed 3 patches… (or were they malware?). When I checked, they appeared legit. Assuming they really were M$ patches, how many times before this has M$ stacked multiple fixes into a patch, millions of times! So I wonder if any of the fixes in these patches had a security aspect.
Comment by Ron — Tuesday 27 March 2007 @ 5:26