'Microsoft today is taking the unusual step of releasing security
updates for unsupported but still widely-used Windows operating
systems like XP and Windows 2003, citing the discovery of a "wormable"
flaw that the company says could be used to fuel a fast-moving malware
threat like the WannaCry ransomware attacks of 2017. From a report:
The vulnerability (CVE-2019-0708) resides in the "remote desktop
services" component built into supported versions of Windows,
including Windows 7, Windows Server 2008 R2, and Windows Server 2008.
It also is present in computers powered by Windows XP and Windows
2003, operating systems for which Microsoft long ago stopped shipping
security updates. Microsoft said the company has not yet observed any
evidence of attacks against the dangerous security flaw, but that it
is trying to head off a serious and imminent threat.'
-- source: https://tech.slashdot.org/story/19/05/14/1943243
A bit like "what is dead may never die"... ;-)
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174