This vulnerability was actively exploited on all versions of Windows, especially on Windows 7. Unfortunately, Microsoft announced that they would not be releasing any new updates until Patch Tuesday in February. That is why 0patch released a micro-patch to help those affected by the vulnerability.
0patch acts before Microsoft does
Microsoft did publish a workaround to the issues, this has its own set of flaws. Among the side effects of using the workaround, several were mentioned: Microsoft’s workaround comprises setting permissions on jscript.dll such that nobody will be able to read it. This workaround has an expected negative side effect that if you’re using a web application that employs legacy JScript (and can as such only be used with Internet Explorer), this application will no longer work in your browser.
Windows Media Player breaks MP4 files. SFC chokes on jscript.dll Printing to Microsoft Print to PDF breaks Proxy automatic configuration scripts (PAC scripts) may not work
For those of you that haven’t used the 0patch platform yet, you should know that the micro-patch is available in 32 and 64-bit formats for the following versions of Windows:Windows 7, Windows 10 v1709, Windows 10 v1803, Windows 10 v1809, Windows Server 2008 R2 , and Windows Server 2019. Did you test the 0patch update yourself? Tell us if it fixed any of the vulnerabilities you may have encountered.
Name *
Email *
Commenting as . Not you?
Save information for future comments
Comment
Δ
