Desktop platforms Toolkit

Story: Windows exploit code made public

• 
• 

"Users who have applied the MS05-051 patch are protected against exploitation of the flaw, Microsoft said. The patch has been available since 11 October, but some users have reported problems with applying the update."

No precisely. It would be more accurate to say "*after* applying the update". The problem is that users had changed the configuration of ACL's or User Rights Assignment (specifically Bypass Traverse Checking) so that a particular folder (%windir%\registration) could not be opened by the COM services.

See http://support.microsoft.com/default.aspx?scid=kb;en-us;909444

• 
• 

• 
• 
• 

Full Talkback thread