Microsoft was forced to patch its malware detector this week after it discovered a bug that allowed attackers to disable the protection with an email attachment.
Hackers could have created files designed to disrupt the malware scanner and sent them through email, rendering the security useless until the file was removed from the system.
"An attacker who successfully exploited this vulnerability could prevent the Microsoft Malware Protection Engine from monitoring affected systems until the specially crafted file is manually removed and the service is restarted," said Microsoft.
Had the bug been exploited it could have led to operating systems or programmes locking up, requiring a manual restart to restore service. Though the flaw was regarded by Microsoft as important, there have been no reported instances of it taking place.
The bug, which affected programmes such as the company's Security Essentials and Windows Defender, has been automatically patched.
"Administrators of enterprise installations should follow their established internal processes to ensure that the definition and engine updates are approved in their update management software, and that clients consume the updates accordingly," it added.
Absolute® Software specialises in technology and services for the management and security of mobile computers and smartphones.
M86 Security is a global provider of web and e-mail security products. We are the only security company able to provide integrated, reliable and...
Qualys is the leading provider of on demand IT security risk and compliance solutions - delivered as a service. Qualys solutions enable...
Established in 1957, BCS, The Chartered Institute for IT, promotes wider social and economic progress through the advancement of information...