Microsoft Out-Of-Band Security Update Patches Critical 'Malware Protection Engine' Flaw

[LASER_oneXM]

source (bleepingcomputer.com): Microsoft Out-Of-Band Security Update Patches Malware Protection Engine Flaw

Yesterday, April 3, Microsoft released an emergency security update via Windows Update that fixes CVE-2018-0986, a vulnerability in the Microsoft Malware Protection Engine (MMPE).

MMPE (mpengine.dll) is the malware scanning, detection, and cleaning component of several Microsoft antivirus and antispyware programs, such as Windows Defender, Microsoft Security Essentials, Microsoft Endpoint Protection, Windows Intune Endpoint Protection, and Microsoft Forefront Endpoint Protection.

Vulnerability rated "critical"

A Google security researcher discovered a flaw in the MMPE component that allows attackers to execute malicious code on a Windows machine. Because the MMPE component runs with system privileges, the bug, if exploited, can grant attackers complete control over a victim's system.

Microsoft rated the vulnerability as "critical," its highest severity level. "To exploit this vulnerability, a specially crafted file must be scanned by an affected version of the Microsoft Malware Protection Engine," the company said in an advisory.

Exploitation is trivial, as an attacker can host the malicious code inside JavaScript files served over a website the victim is accessing, add the malicious code to email file attachments, or send a boobytrapped file to a victim via an instant messaging client.

 

[upnorth]

The good news is that Microsoft decoupled MMPE component updates from OS updates, meaning Microsoft can silently deliver the necessary patches without needing user interaction. The OS maker has fixed the flaw in MMPE version 1.1.14700.5, which should be deployed on all vulnerable systems in the next 48 hours unless system admins and PC owners have specifically blocked MMPE updates via local policies.

 

[L0ckJaw]

Strange i did not get the update yesterday.

 

[ForgottenSeer 58943]

Just when everyone was hailing the higher scores from MS AV, and this, a huge.. Catastrophic bypass of the product.

 

[ZeroDay]

Well they've patched it and I personally still think WD on Win 10 is a fantastic product, even more so when you take all the other Windows defender security centre features into consideration.

 

[Windows Defender Shill]

Lol, vulnerabilities in Windows Defender are like groundhog day. How can the manufacture of Windows not fundamentally understand the vulnerabilities of Windows Defender?

Over the past year there has been an uncomfortable amount discovered, If you use WD always always update.

 

[CyberTech]

Full article: Update Windows Security software to protect against a serious vulnerability - gHacks Tech News

 

[L0ckJaw]

Stil did not receive the update.