At work, the guys analyze rootkits and exploits. According to Microsoft, successfully.
Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290) This security update resolves a publicly disclosed vulnerability in the Print Spooler service. The vulnerability could allow remote code execution if an attacker sends a specially crafted print request to a vulnerable system that has a print spooler interface exposed over RPC. By default, printers are not shared on any currently supported Windows operating system.
...
Microsoft thanks the following for working with us to help protect customers:
Sergey Golovanov, Alexander Gostev, Maxim Golovkin, and Alexey Monastyrsky of Kaspersky Lab, and Vitaly Kiktenko and Alexander Saprykin of Design and Test Lab for reporting an issue described in MS10-061
That’s how it goes. For the most part, work is routine. But if you add up those work hours and days, what you get is “worked with us to help protect customers.” In case anyone missed it, that means you and me, Windows OS users. :) So thanks to Vitaly and Sasha for that.
Anyone interested in operating system security can register for Microsoft’s webcast, which will take place this evening:
TechNet Webcast: Information About Microsoft September Security Bulletins
Webcast topic: details on the September exploits (including the one mentioned above) and answers to listeners’ questions.