Sponsor for PC Pals Forum

Author Topic: New major security scare for Windows  (Read 6496 times)

Offline Rik

  • Former Admin
  • *****
  • Posts: 26506
  • Ceud mille failte
New major security scare for Windows
« on: November 25, 2010, 09:47 »
El Reg reports that:

Quote
Antimalware provider Prevx has sounded the alarm about a serious vulnerability in fully patched versions of Microsoft Windows. It allows attackers to execute malware, even in versions designed to withstand such exploits.

Technical details have already been published on a Chinese forum, leading to speculation that it won't be long before attackers exploit it in the wild.

“This could potentially become a nightmare due to the nature of the flaw,” Prevx researcher Marco Giuliani wrote here. “We expect to see this exploit being actively used by malwares very soon – it's an opportunity that malware writers surely won't miss.”

The flaw resides in the win32k.sys part of the Windows kernel and results from an API known as NtGdiEnableEUDC that fails to properly vet user input for harmful content. Attackers can exploit the bug to redirect overwritten return memory addresses to malicious code, which is then executed with kernel mode privileges. As a result, the flaw allows even users or processes with limited privileges to execute code will elevated rights.

“Being a privilege escalation exploit, it bypasses by design even the protection given by the User Account Control technology implemented in Windows Vista and Windows 7,” Giuliani said. “All Windows XP/Vista/7 both 32 and 64 bit are vulnerable to this attack.”

Microsoft "is aware of the issue and it is under investigation," according to a statement, which a spokeswoman attributed to Jerry Bryant, Group Manager of the company's Response Communications.

Bring back the BBC Micro!
Slainthe!

Rik

Offline Simon

  • Administrator
  • *****
  • Posts: 76533
  • First to score 7/7 in Quiz of The Week's News 2017
Re: New major security scare for Windows
« Reply #1 on: November 25, 2010, 10:15 »
:bawl:
Many thanks to all our members, who have made PC Pals such an outstanding success!   :thumb:

Offline Rik

  • Former Admin
  • *****
  • Posts: 26506
  • Ceud mille failte
Re: New major security scare for Windows
« Reply #2 on: November 25, 2010, 10:27 »
Exactly.
Slainthe!

Rik

Offline Clive

  • Administrator
  • *****
  • Posts: 73669
  • Won Quiz of the Year 2015,2016,2017, 2020, 2021
Re: New major security scare for Windows
« Reply #3 on: November 25, 2010, 11:09 »
And today Sky News claims that criminal gangs have got hold of Stuxnet and which may shut down power stations and hospitals.  This is very bad news for all of us.   :bawl:

Offline Simon

  • Administrator
  • *****
  • Posts: 76533
  • First to score 7/7 in Quiz of The Week's News 2017
Re: New major security scare for Windows
« Reply #4 on: November 25, 2010, 13:23 »
:eeek:
Many thanks to all our members, who have made PC Pals such an outstanding success!   :thumb:

Offline davy51

  • Loyal Member
  • *****
  • Posts: 1690
Re: New major security scare for Windows
« Reply #5 on: November 25, 2010, 14:29 »
And today Sky News claims that criminal gangs have got hold of Stuxnet and which may shut down power stations and hospitals.  This is very bad news for all of us.   :bawl:


go get a 12 gauge shotgun for all the law abiding people
Wouldnt take long to open them back up
Dave

Don't walk behind me, I may not lead. Don't walk in front of me, I may not follow. Just walk beside me and be my friend

Albert Camus

Offline sam

  • Administrator
  • *****
  • Posts: 19966
Re: New major security scare for Windows
« Reply #6 on: November 25, 2010, 14:30 »
And today Sky News claims that criminal gangs have got hold of Stuxnet and which may shut down power stations and hospitals.  This is very bad news for all of us.   :bawl:

Sky News = Fox News = scaremongering w**kers
- sam | @starrydude --

Offline sam

  • Administrator
  • *****
  • Posts: 19966
Re: New major security scare for Windows
« Reply #7 on: November 25, 2010, 14:31 »
go get a 12 gauge shotgun for all the law abiding people

"on a road from Canada - welcome to the USA, have you brought your gun?"  :devil:
- sam | @starrydude --

Offline davy51

  • Loyal Member
  • *****
  • Posts: 1690
Re: New major security scare for Windows
« Reply #8 on: November 25, 2010, 14:46 »
"on a road from Canada - welcome to the USA, have you brought your gun?"  :devil:


LOL

Its called a safety measure against thugs and criminals lol
Dave

Don't walk behind me, I may not lead. Don't walk in front of me, I may not follow. Just walk beside me and be my friend

Albert Camus

Offline Rik

  • Former Admin
  • *****
  • Posts: 26506
  • Ceud mille failte
Re: New major security scare for Windows
« Reply #9 on: November 25, 2010, 16:00 »
Does that include all politicians?  :o:
Slainthe!

Rik

Offline davy51

  • Loyal Member
  • *****
  • Posts: 1690
Re: New major security scare for Windows
« Reply #10 on: November 25, 2010, 17:22 »
Well Rik according to our constitution that was the idea of allowing the people to have guns to protect themselves from a Govt that decided we couldn't be free


They believed an armed society was a free society
« Last Edit: November 25, 2010, 17:25 by davy51 »
Dave

Don't walk behind me, I may not lead. Don't walk in front of me, I may not follow. Just walk beside me and be my friend

Albert Camus

Offline Rik

  • Former Admin
  • *****
  • Posts: 26506
  • Ceud mille failte
Re: New major security scare for Windows
« Reply #11 on: November 25, 2010, 17:25 »
And yet the system still produces a Palin. ;)
Slainthe!

Rik

Offline davy51

  • Loyal Member
  • *****
  • Posts: 1690
Re: New major security scare for Windows
« Reply #12 on: November 25, 2010, 21:45 »
All country's make mistakes every now and then lol

You can have her if you want her
Dave

Don't walk behind me, I may not lead. Don't walk in front of me, I may not follow. Just walk beside me and be my friend

Albert Camus

Offline sam

  • Administrator
  • *****
  • Posts: 19966
Re: New major security scare for Windows
« Reply #13 on: November 26, 2010, 05:45 »
she's a big friend of Kim Jong-il so I'd send her on a fact finding mission  :)x
- sam | @starrydude --

Offline Rik

  • Former Admin
  • *****
  • Posts: 26506
  • Ceud mille failte
Re: New major security scare for Windows
« Reply #14 on: November 26, 2010, 10:57 »
All country's make mistakes every now and then lol

You can have her if you want her

Was that in the biblical sense? ;D
Slainthe!

Rik


Show unread posts since last visit.
Sponsor for PC Pals Forum