Slashdot Mirror
Newly-Found Windows Bug Affects All Versions Since NT
garg0yle writes "A researcher has found a security bug that could allow privilege escalation in Windows. Nothing new there, right? Well, this affects the Virtual DOS Machine, found in every 32-bit version of Windows all the way back to Windows NT. That's 17 years worth of Windows and counting. 'Using code written for the VDM, an unprivileged user can inject code of his choosing directly into the system's kernel, making it possible to make changes to highly sensitive parts of the operating system. ... The vulnerability exists in all 32-bit versions of Microsoft OSes released since 1993, and proof-of-concept code works on the XP, Server 2003, Vista, Server 2008, and 7 versions of Windows, Ormandy reported.'"
Cue "Windows Sucks" comments in 5, 4, 3, 2, 1....
This bug was discovered by Tavis Ormandy.
Tavis, you need a girlfriend.
Yet another reason people need to abandon 32-bit OSs. Seriously. What's the point of using half the power of your CPU?
For those who seek perfection there can be no rest on this side of the grave.
Slashdot makes me sick. It's just not fair to go digging 14 years prior to the date when Microsoft finally starting taking security seriously.
Rich And Stupid is not so bad as Working For Rich And Stupid.
I don't know about you, but I don't want all those unemployed former MS-programmers to get down to Linux.
I'm helping to keep the Linux codebase clean and pragmatic by running Windows once in a while and giving a false sense of userdemand.
But seriously though, I have seen alot of "opensource windows clones", they all look like clowns to me in usability and aesthetics.
Actually, I was just messing around. I'm kind of suprised it took someone this long to find a vulnerability in wowexec. I'm sure MS is not even thinking much about this, yet pretty much any program can have the possiblity of a buffer overrun or some sort of registry memory shift.
I found it funny that the Google ad displayed next to the article was for Microsoft forefront touting the security features.
http://www.perfectreign.com/stuff/2010/forefront.jpg
The Kai's Semi-Updated Website Thingy
There, fixed that for ya. :)
- First they ignore you, then they laugh at you, then ???, then profit.
True. For home users you just pop up a window saying "Click here to install keylogger".
Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
Windows 98SE rules!
This shows one of Linux's biggest weaknesses, no support for legacy exploits.
Ahhh, Gcc doesn't like the smiley face at the end of line 20
Sig out of date
Windows users are in the dark and fucked.
You make that sound like a bad thing.
XML is a known as a key material required to create SMD: Software of Mass Destruction
Oh, fuck me for not even reading the summary properly. :p
Nice try, dude. If that really worked, we'd all be getting laid like rock stars.
"A government is a body of people usually -- notably -- ungoverned." -Shepherd Book
Since it was a display driver, all you had to do to exploit it was be able to see the screen.