Kernel Vulnerability Found In Vista - 23rd Nov 2008 10:10pm
Originally Posted by CNET
A flaw in Vista's networking has been found that can crash the system, but no fix is expected until the next service pack
A flaw has been found in Windows Vista that could allow rootkits to be hidden or denial-of-service attacks to be executed on computers using the operating system.
The vulnerability was found by Thomas Unterleitner of Austrian security company Phion and was announced Friday. Unterleitner told ZDNet UK on Friday that Phion told Microsoft about the flaw in October but that he understood a fix would only be issued in the next Vista service pack.
According to Unterleitner's disclosure of the flaw, the issue lies in the network input/output subsystem of Vista. Certain requests sent to the iphlpapi.dll API can cause a buffer overflow that corrupts the Vista kernel memory, resulting in a blue-screen-of-death crash.
"This buffer overflow could (also) be exploited to inject code, hence compromising client security," Unterleitner said.
A flaw has been found in Windows Vista that could allow rootkits to be hidden or denial-of-service attacks to be executed on computers using the operating system.
The vulnerability was found by Thomas Unterleitner of Austrian security company Phion and was announced Friday. Unterleitner told ZDNet UK on Friday that Phion told Microsoft about the flaw in October but that he understood a fix would only be issued in the next Vista service pack.
According to Unterleitner's disclosure of the flaw, the issue lies in the network input/output subsystem of Vista. Certain requests sent to the iphlpapi.dll API can cause a buffer overflow that corrupts the Vista kernel memory, resulting in a blue-screen-of-death crash.
"This buffer overflow could (also) be exploited to inject code, hence compromising client security," Unterleitner said.
Another reason to despise Shistain...
CNET News Report
when are they ever gonna learn ?
well truth to be told ive never brought anything MS yet