Five-year-old design flaw found in all Windows versions

Posted by   Virus Bulletin on   Nov 26, 2007

Microsoft engineers spend Thanksgiving holidays writing patch.

During the Kiwicon conference earlier this month, ethical hacker Beau Butler from New Zealand disclosed a design flaw in Windows that could potentially affect millions of users. Said flaw seems to have been first discovered and, apparently, fixed more than five years ago, but this fix has turned out to be only partially effective, Australian newspaper The Age reports.

A Microsoft spokesman confirmed that this is a serious issue and asked Butler and The Age not to disclose details of the flaw while Microsoft's security team is working on a fix. The vulnerability is said to occur in all versions of Windows, including Vista, and could lead to hackers taking over many PCs with a single attack. However, while Butler found more than 160.000 computers in New Zealand to be vulnerable, the flaw is reported to only affect computers in countries outside the United States.

Posted on 26 November 2007 by Virus Bulletin



Latest posts:

VB2016 paper: The TAO of Automated Iframe Injectors - Building Drive-by Platforms For Fun

We publish Aditya K. Sood's VB2016 paper on the use of iframe injectors by cybercriminals to deliver drive-by downloads.

“Cybersecurity is, at its core, a people problem,” says VB2016 keynote speaker

An interview with VB2016’s keynote speaker Christine Whalley - Director, Governance and IT Risk Management at Pfizer

Throwback Thursday: Following the Breadcrumbs

In 1999, Christine Orshesky described how one large organization decided to find out how and where the viruses within it were being obtained so it could do more to protect its networks.

VB2016 preview: Cryptography mistakes in malware

At VB2016, two talks will discuss mistakes made by malware authors in cryptographic implementations. Ben Herzog and Yaniv Balmas will present a paper in which they look at a number of these mistakes, while Malwarebytes researcher hasherezade will…

GPS technology is more at risk from cyber attack than ever before, security expert demonstrates at VB2016

Next month at VB2016, HPE Security's Oleg Petrovsky will speak about attacks on GPS. We conducted a short interview with Oleg and asked him about GPS, about the conference, and about his ultimate dinner party.