Home | Community | Message Board


This site includes paid links. Please support our sponsors.


Welcome to the Shroomery Message Board! You are experiencing a small sample of what the site has to offer. Please login or register to post messages and view our exclusive members-only content. You'll gain access to additional forums, file attachments, board customizations, encrypted private messages, and much more!

Myyco.com Shop: Golden Teacher Liquid Culture For Sale

Jump to first unread post Pages: 1
New Serious Security Hole in Vista
    #6730839 -

Here we go again. I'm sure glad Vista is so secure that "you don't need virus protection."

--

A new security vulnerability puts Windows users at risk of serious cyberattacks, Microsoft warned late Wednesday.

The vulnerability affects all recent Windows versions, including Vista, which Microsoft has promoted heavily for its security. The operating system software is flawed in the way it handles animated cursors, Microsoft said in a security advisory.

An attacker could exploit the vulnerability through a Web page or e-mail message with rigged computer code, Microsoft said.

"Upon viewing a Web page, previewing or reading a specially crafted message, or opening a specially crafted e-mail attachment, the attacker could cause the affected system to execute code," Microsoft said in its advisory.

Such holes are often exploited by cybercrooks to do "drive-by" installations of malicious software. Spyware and remote control tools that turn PCs into drones for the attacker are silently loaded onto vulnerable computers by tricking people to visit a rigged Web site or hacking a trusted site. The Web site for the Super Bowl stadium suffered a recent example of a drive-by attack.

Sample code that demonstrates the vulnerability has already been posted on the Web, McAfee said in a security alert sent to customers. "Malware exploiting this vulnerability has been observed in the wild," the security company said in the alert.

Other security experts also raised an alarm. "I expect attackers will pick up on this as soon as they figure out how to, we'll very shortly see the usual suspects using it," said Roger Thompson, chief technology officer at security software maker Exploit Prevention Labs. "The sample site is already offline; this could be a prelude to a bigger attack."

Animated cursors allow a mouse pointer to appear animated. The animated-cursors feature is designated by the .ani suffix, but a successful attack is not constrained by this file type, Microsoft said. As a result, simply blocking such files won't protect a PC.

The exposure to attacks that exploit the flaw is mitigated on Vista machines with Internet Explorer 7, Microsoft noted. IE 7 protected mode shields the computer against drive-by installations because the browser is restricted to where it can write files.
zdnet.com


--------------------
Republican Values:

1) You can't get married to your spouse who is the same sex as you.
2) You can't have an abortion no matter how much you don't want a child.
3) You can't have a certain plant in your possession or you'll get locked up with a rapist and a murderer.

4) We need a smaller, less-intrusive government.

Extras: Filter Print Post Top
Re: New Serious Security Hole in Vista [Re: Diploid]
    #6730937 -

isnt the browser still integrated seemlessly with the operating system? I dont know much about vista, but with its recently release I can only imagine whats to come.


--------------------
The DJ's took pills to stay awake and play for seven days.

Extras: Filter Print Post Top
Re: New Serious Security Hole in Vista [Re: tak]
    #6731923 -

Yeah, the web browser runs the file manager.


--------------------
delta9

Extras: Filter Print Post Top
Re: New Serious Security Hole in Vista [Re: delta9]
    #6734763 -

And it always will, Im glad im sticking with XP ^_^


--------------------
Shrowded in an angelic white veil of darkness
~Frosty Storm~

Extras: Filter Print Post Top
Re: New Serious Security Hole in Vista [Re: Frosty_Storm]
    #6740498 -

:lol:

hahaha

fucking piece of shit windows.

these things are anounced far too oftern.

Extras: Filter Print Post Top
Re: New Serious Security Hole in Vista [Re: tak]
    #6741080 -

> isnt the browser still integrated seemlessly with the operating system?

I find it funny how easily Microsoft removed IE6 from XP when it was time to upgrade to IE7. A lot of Microsoft folks should be in jail on perjury charges for that one...

> The vulnerability affects all recent Windows versions, including Vista

No it doesn't. Vista is secure, remember? Vista doesn't need things like antivirus, because it is secure, remember? Couldn't be a security problem with Vista, because Microsoft told me to trust them, remember? Glad I'm not running any Microsoft software, or hardware, for that matter. (And yes, the flaw does effect Vista. I was being sarcastic.)


--------------------
Just another spore in the wind.

Extras: Filter Print Post Top
Re: New Serious Security Hole in Vista [Re: Seuss]
    #6741975 -

Makes me wonder how they define a virus...

There are tons of legitimate programs that use the same functions, and procedures as trojans, virus, etc.

Is MS gonna keep an updated virus definition list?


--------------------
The DJ's took pills to stay awake and play for seven days.

Extras: Filter Print Post Top
Re: New Serious Security Hole in Vista [Re: tak]
    #6742022 -

I'm not really that surprised to be honest. This is kinda how software works, they test it as much as they can, then release it to the public and hope they didn't miss too many bugs. No amount of testing with 15 people will ever put software through the shit that happens with 25 million people. Any time you buy software immediately after it's released you're going to have to download a couple patches in the following weeks.

Edited by ApJunkie (04/03/07 12:24 PM)

Extras: Filter Print Post Top
Re: New Serious Security Hole in Vista [Re: ApJunkie]
    #6742249 -

That's what public beta tests are for.

The problem now is that many software developers would rather just use their first group of customers as beta testers instead. Why give beta testers free software when you can make fools and fanboys pay you to test the software?


--------------------

I find your lack of faith disturbing

Extras: Filter Print Post Top
Re: New Serious Security Hole in Vista [Re: Diploid]
    #6742301 -

Hmm

so this affects XP, 2K, Me, and 98? :lol:

I thought Vista was built completely differently than the previous ones, but this makes it seem like it really is just a prettier looking XP?

Extras: Filter Print Post Top
Jump to top Pages: 1

Myyco.com Shop: Golden Teacher Liquid Culture For Sale


Similar ThreadsPosterViewsRepliesLast post
* Microsoft Patches Seven Critical Security Holes DiploidM 1,067 3 11/15/06 07:32 AM
by nobhdy
* Yet Another Windows Security Flaw - More Serious Than Usual DiploidM 835 2 01/04/06 04:44 PM
by drtyfrnk
* Windows Vista So Secure, No Anti-virus Required??
( 1 2 all )
DiploidM 4,052 30 11/30/06 03:45 PM
by Konnrade
* Pirates Hack Vista's Registration Features DiploidM 1,510 9 12/11/06 11:10 AM
by Vvellum
* Mozilla Patches 13 Firefox Security Flaws, Eight Critical DiploidM 925 2 07/28/06 11:34 AM
by Vvellum
* Microsoft Vista feature presentation YthanA 798 11 06/10/06 10:04 PM
by Jim
* Microsoft and Virus = Software Fungi_x 550 0 01/06/05 07:20 AM
by Fungi_x
* blue security hacked? ChromeCrow 852 5 05/02/06 07:09 PM
by Diploid

Extra information
You cannot start new topics / You cannot reply to topics
HTML is disabled / BBCode is enabled
Moderator: trendal, automan, Northerner
1,522 topic views. 0 members, 6 guests and 0 web crawlers are browsing this forum.
[ Show Images Only | Sort by Score | Print Topic ]
Search this thread:

Copyright 1997-2026 Mind Media. Some rights reserved.

Generated in 0.023 seconds spending 0.004 seconds on 14 queries.