Slashdot Mirror


Newly-Found Windows Bug Affects All Versions Since NT

garg0yle writes "A researcher has found a security bug that could allow privilege escalation in Windows. Nothing new there, right? Well, this affects the Virtual DOS Machine, found in every 32-bit version of Windows all the way back to Windows NT. That's 17 years worth of Windows and counting. 'Using code written for the VDM, an unprivileged user can inject code of his choosing directly into the system's kernel, making it possible to make changes to highly sensitive parts of the operating system. ... The vulnerability exists in all 32-bit versions of Microsoft OSes released since 1993, and proof-of-concept code works on the XP, Server 2003, Vista, Server 2008, and 7 versions of Windows, Ormandy reported.'"

7 of 393 comments (clear)

  1. Re:Cue "Windows Sucks" comments in 5, 4, 3, 2, 1 by jbezorg · · Score: 4, Funny

    Cue the "cue the" comments in 3, 2, 1, 0, -1, -2, -3....

    --
    I've lost all my marbles except one & It's fun to test angular & centripetal acceleration in my skull
  2. Re:Free time. by taviso · · Score: 5, Funny

    Applications Welcome ;-)

    --
    ex$$
  3. "OSs released since 1993" by Dystopian+Rebel · · Score: 3, Funny

    Slashdot makes me sick. It's just not fair to go digging 14 years prior to the date when Microsoft finally starting taking security seriously.

    --
    Rich And Stupid is not so bad as Working For Rich And Stupid.
  4. Re:Free time. by JustOK · · Score: 4, Funny

    There's an app for that?

    --
    rewriting history since 2109
  5. I told you! by Yvan256 · · Score: 3, Funny

    Windows 98SE rules!

  6. Re:Only 32-bit Windows builds? by The+Wild+Norseman · · Score: 4, Funny

    Oh, fuck me for not even reading the summary properly. :p

    Nice try, dude. If that really worked, we'd all be getting laid like rock stars.

    --
    "A government is a body of people usually -- notably -- ungoverned." -Shepherd Book
  7. Re:Cue "Windows Sucks" comments in 5, 4, 3, 2, 1 by bami · · Score: 5, Funny

    More like cue the comments in 3, 2, 5 days, 3 hours, 23 minutes, 8 minutes, 2 hours 15 minutes, 15 seconds, 'Any moment now', 2 years.