Pope Sasser I

Encyclical

"Diebus Septendecim". eEye reported the LSASS flaw, Microsoft fixed it in April, and about seventeen days later came Sasser, written by a German teenager, which sent hundreds of thousands of PCs into reboot loops and disrupted airlines, banks and hospitals. The gap between patch and exploit was now measured in days, not months. The year taught that automatic updates are not a convenience but a necessity.

Saint page: Saint LSASS (Sasser)

Cardinals

Microsoft ASN.1 library integer overflows (MS04-007) · GDI+ JPEG parsing overflow (MS04-028)