Discovered
by two researchers with the Information Security Lab & School of
Computer Science & Engineering, South China University of Technology
Guangzhou, China, the vulnerability was exploited in the wild in July
or August 2016. This week, the researchers published a proof-of-concept
on GitHub and revealed that Microsoft has already acknowledged the bug.
"This
issue does not affect currently supported versions. We continue to
recommend that customers upgrade to our latest operating systems and
benefit from robust, modern protection,” a Microsoft spokesperson told SecurityWeek in an emailed statement.
More at SecurityWeek
