Out of Band Microsoft Security Advisory MS08-067
Summary: Microsoft released an out-of-band patch on October 23, 2008 for a DCE/RPC vulnerability that was being actively exploited by a Trojan. Cisco Talos published Snort rules for the issue the same day and linked to Microsoft's bulletin MS08-067 and its entry for TrojanSpy:Win32/Gimmiv.A.
What's compelling: An out-of-band patch means Microsoft judged the active exploitation serious enough not to wait for its normal release cycle, so the window between disclosure and attack was already open when the fix shipped.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026