Security Advisory 3009008 released

JMH · Oct 16, 2014

Today, we released Security Advisory 3009008 to address a vulnerability in Secure Sockets Layer (SSL) 3.0 which could allow information disclosure. This is an industry-wide vulnerability that affects the protocol itself, and is not specific to Microsoft’s implementation of SSL or the Windows operating system.
This advisory provides guidance for customers so that they can disable SSL 3.0 in the browser. Customers should be aware that once they disable SSL 3.0, if they visit a website that supports only SSL 3.0 and does not support newer encryption protocols, they will receive a connection error message and will not be able to connect to that website.

Security Advisory 3009008 released - MSRC - Site Home - TechNet Blogs

Search

Search

Security Advisory 3009008 released

JMH

Emeritus, Contributor