mailing list archives
netdde during update
From: "morning_wood" <se_cur_ity () hotmail com>
Date: Tue, 8 Feb 2005 21:06:33 -0800
while "netdde" is not started by default.
I did just notice "netdde" does run during
this would allow a window of opportunity
to exploit the service. a worm using the
netdde exploit could take advantage of
this before the user fully updates.
Full-Disclosure - We believe in it.