MSGID: 1:396/45.29@fidonet fa25ecf0
PID: OpenXP/5.0.51 (Win32)
CHRS: ASCII 1
TZUTC: -0500
Microsoft wraps up 2021 with 64 patched vulnerabilities- 
including Windows 7 fixes

https://news.sophos.com/en-us/2021/12/14/microsoft-wraps-up- 
2021-with-64-patched-vulnerabilities-including-windows-7-fixes/

I found this comment somewhat amusing yet disconcerting:

"fixes apply to versions of Windows stretching the way back to  
the end-of-life'd Windows 7. In fact, there are 17 bugs being  
patched in Windows 7 this month"

WRT Win7, "vulnerability in Windows' Encrypted File System  
(EFS) that also extends back to Windows 7 (CVE-2021-43217)-one  
that can be triggered regardless of whether or not EFS is in  
use on the targeted system. A specially-crafted attack could  
result in a buffer overflow write to memory that could result  
in unauthenticated code being executed by triggering EFS. This  
bug has been publicly disclosed, making it an urgent fix."

The EFS exploit sounds a bit worrisome since "the problem" can  
be triggered even when EFS is not even in use.  I *was*  
thinking of trying it a while back though.

--
  ../|ug

--- OpenXP 5.0.51
 * Origin:  (1:396/45.29)
SEEN-BY: 1/123 15/0 90/1 105/81 106/201 633 987 120/340 123/131 124/5014
SEEN-BY: 124/5016 129/305 330 331 130/330 153/7715 218/700 226/30
SEEN-BY: 227/114 229/110 206 317 400 424 426 428 452 550 664 700 240/5832
SEEN-BY: 266/512 280/464 282/1038 292/854 301/1 317/3 320/219 322/757
SEEN-BY: 342/200 387/25 26 28 396/45 460/58 633/280 712/848
PATH: 396/45 229/426