Breaking

Monday, July 11, 2016

Four new Windows patches to stay away from: KB 2952664, 2976978, 2977759, and Windows Journal 3170735

There are signs that Windows Journal - an enormous security opening in Windows - is going to get the hatchet.




Microsoft has discharged four new fixes for Windows 7 and 8.1, and they're all deserving of your disregard.

Three of yesterday's patches, KB 2952664, KB 2976978, KB 2977759, resemble terrible fixing pennies - they keep turning up. These "similarity redesigns" are intended to help clients explore the sensitive move from Windows 7 SP1, Windows 8 and 8.1, and Windows 7 RTM (individually) to Windows 10. I keep going expounded on them on March 31, and there doesn't seem, by all accounts, to be anything new with any of them.

Force of PowerShell IFW Deep Dive promo

The fundamental manual for PowerShell for Windows, Windows Server, and Exchange

Benefit as much as possible from Microsoft's summon line by acing the subtleties of the PowerShell dialect

The patches are up to adaptations 23, 27, and 23, separately, making an aggregate of 73 times they've been pushed out the programmed upgrade chute. All are set apart as discretionary (and along these lines unchecked) nonsecurity patches. Most likely they'll transform into prescribed patches in a week or two, just like Microsoft's wont.

The fourth fix, KB 3170735, has an alternate family. It's a discretionary, nonsecurity overhaul for Windows Journal that "adds the capacity to inform you about future Windows Journal advancements." Windows Journal, you may review, is an ancient, pen-driven, note-taking application - sort of a Neanderthal OneNote - that showed up in WinXP Tablet. Aside from security patches, it has moped unaltered from that point forward.

Windows Journal produces .JNT documents, which can be perused by the Windows Journal application itself (even on Windows 10) or by an extraordinarily created standalone JNT Viewer. The KB 816091 article connected with the Viewer has been chronicled, which implies Microsoft no more backings it. I couldn't discover the Viewer accessible for download from Microsoft's website, however it is accessible from different outsider destinations.

OneNote doesn't work with JNT records.

Windows Journal has for some time been a headache for Microsoft. Assailants have found that jimmying the JNT record can assume control over a PC - on the off chance that you double tap on a JNT document, your PC could be given over to an exploiter. You don't need to do something besides open the JNT document.

There have been six security patches discharged in the previous two years for Windows Journal alone:

MS14-038/KB 2975689 in July 2014

MS15-045/KB 3046002 in May 2015

MS15-098/KB 3069114 in September 2015

MS15-114/KB 3100213 in November 2015

MS16-013/KB 3115858 in February 2016

MS16-056/KB 3156761 in May 2016

Likewise, there have been nonsecurity patches - generally undocumented - incorporating KB 3138378 in May, a risky patch that is up to update 4.

We've even seen Windows Journal patches inching into Windows 10 total overhauls, with Windows 10.1.12 (rendition 1511 form 10586.318), discharged in May, distinguishing Windows Journal fixes particularly. Undoubtedly there were other aggregate redesigns with Windows Journal fixes that just stay undocumented.

Why is Microsoft giving Windows Journal such exceptional treatment now, with a KB intended to "inform you about future Windows Journal improvements"? I have a hypothesis. My theory is that Microsoft is going to expostulate Windows Journal in the Win10 Anniversary Update. Further, I think this KB just exists keeping in mind the end goal to caution you that you're going to lose Windows Journal on the off chance that you introduce the Anniversary Update, probably after Aug. 2.

In the event that you write "Windows Journal" in the Cortana look enclose Win10 fabricate 1511, Windows Journal shows up, asking for you to introduce a print driver. In the event that you write "Windows Journal" in the Cortana look confine any late "Redstone 1" work of Windows 10, you're met with a clear gaze - or a Bing seek, which is Cortana's variant of a clear gaze.

The bottom line: Windows Journal is a gigantic security gap in Windows that Microsoft hasn't possessed the capacity to alter. Microsoft has given Journal a chance to lie neglected subsequent to XP days. I trust Journal's going to get the hatchet.

I can't say I point the finger at Microsoft.



                                  
http://www.infoworld.com/article/3091875/microsoft-windows/four-new-windows-patches-to-avoid-kb-2952664-2976978-2977759-and-windows-journal-3170735.html

No comments:

Post a Comment