TMCnet News
MEDIA ALERT: SANS Institute Hosts Free Webcast to Help Information Security Professionals Mitigate Impact of the MS15-034 VulnerabilityBETHESDA, Md., April 16, 2015 /PRNewswire-USNewswire/ -- The SANS Institute is hosting a complimentary webcast to discuss the MS15-034 exploit, why it happened, how to prevent exploitation and how prevalent its use has already become. Who: Hosted by SANS Chief Research Officer and the Director of the SANS Internet Storm Center (ISC), Johannes Ullrich PhD. What: Live (and archived) webcast will discuss the latest news surrounding MS15-034 followed by a discussion on the steps security practitioners can take to mitigate risks caused by this vulnerability. When: Thursday, April 16 at 6:00 PM EDT (22:00:00 UTC) Where: http://www.sans.org/u/3BZ Why: On Tuesday, April 14 - Microsoft released MS15-034 as part of its monthly patch. The bulletin addresses a vulnerability in HTTP.sys, the library processing HTTP requests in Windows. According to Microsoft, the vulnerability could be used to run arbitrary code on a vulnerable host. Among other programs, IIS uses HTP.sys, and is directly exposed to the exploit. As of yesterday, trivial to execute exploits have been made public that will cause an IIS server to crash, and in a published analysis of the bug, an exploit to leak kernel memory was outlined. About SANS Institute
To view the original version on PR Newswire, visit:http://www.prnewswire.com/news-releases/media-alert-sans-institute-hosts-free-webcast-to-help-information-security-professionals-mitigate-impact-of-the-ms15-034-vulnerability-300067435.html SOURCE SANS Institute |