Microsoft DNS Security Fix Knocks ZoneAlarm Users Offline
July 9, 2008 – 1:42 PMThe problem began when Microsoft on Tuesday sent patch number KB951748 to Windows users. The patch is designed to plug a security vulnerability that leaves computers vulnerable to so-called DNS attacks.
The vulnerability is widespread and affects products made by numerous networking and software vendors beyond Microsoft. It was discovered by Dan Kaminsky, of the Seattle-based security firm IOActive.
Through a DNS attack, a hacker can redirect Internet users’ page requests to phishing sites or other malicious pages. Various reports suggest that ZoneAlarm interprets the Microsoft patch itself as malicious code, and automatically severs the user’s Internet connection in response.
Until a fix is issued, some forum users are working around the glitch by either uninstalling ZoneAlarm or the Microsoft patch. Either move, however, could leave their computers vulnerable to cyber-attacks.
You must be logged in to post a comment.