Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows Gadgets. Yes or No?

07 May 2014   #1
dubya89

Windows 7
 
 
Windows Gadgets. Yes or No?

Dled these 2 gadgets from here:

http://www.myfavoritegadgets.info/cl...nDownload.html

which are the same files hosted on softpedia.

scanned both files and found no virus:

https://www.virustotal.com/en/file/7...is/1399459303/

https://www.virustotal.com/en/file/6...is/1399459294/

SO it's it safe to run these or do they have vulnerabilities ?

https://technet.microsoft.com/library/security/2719662


My System SpecsSystem Spec
.
07 May 2014   #2
HarriePateman

Windows 7 Ultimate 64-bit
 
 

I cant see any problems with them.
My System SpecsSystem Spec
07 May 2014   #3
Alejandro85

Windows 7 Ultimate x64
 
 

It's really difficult to tell just by the technet article, since it gives little details on what the vulnerabilities actually are, it just states that disabling gadgets altogether is the recommended solution, but far from ideal in the real world.

My impression based on the few indications given on the two points from the article are that the gadget can either run arbitrary code from inside the computer or it might be commanded to do so from an attacker.

Your virus scan probably says local execution is safe, but for the outside "attacker" I think you can mitigate that eventual hole by firewalling sidebar.exe off the internet to be extra sure.

Other than that, together with usual precautions of low privileges/antivirus/firewall/common sense, I don't see anything bad with it, as long as you trust the author.
My System SpecsSystem Spec
.

07 May 2014   #4
andrew129260

Windows 7 Professional x64 Sp1
 
 

Via the white paper here:

http://media.blackhat.com/bh-us-12/B...Gadgets_WP.pdf

The vulnerability involves the fact that any gadget that connects to the internet can be compromised, and gain control over the system. So for example, the built in windows 7 cpu gadget is not vulnerable, but the weather gadget is.

There has not been any wide or known history of this being used in the wild however. But it can be done. Third party gadgets are more vulnerable due to the fact that they are not typically built with security in mind.

An easy way to avoid the vulnerabilities if you are worried, is to use turn off gadgets in turn windows features on or off in the control panel under programs and features. Then uncheck gadgets, click OK and restart.

Microsoft also has a patch about it, which can be found here:

Microsoft Security Advisory: Vulnerabilities in Gadgets could allow remote code execution

Here is the interesting bit though:

If this vulnerability is bad like it states, why is it not offered in windows update? That my friends, is the real question. It is not even offered in the optional updates.

Due to this, I think the likely hood of this attack being carried out is a small risk, and I use gadgets.

Remember though: Nothing is 100% secure. Just because you disable gadgets, does not mean there is not another way into your pc. But if you are paranoid and want to be as safe as possible, disable them.
My System SpecsSystem Spec
Reply

 Windows Gadgets. Yes or No?




Thread Tools




Similar help and support threads
Thread Forum
user gadgets are not displayed in gadgets list
Hi guys.. I'm desperate and Need some help! I developed a new gadget and put it inside Users\myUser\appData\local\microsoft\windows sidebar folder. Everything worked fine untill I changed the .net solution file name (which is not part of the gadget files) ... Now, it stoped working in my...
Gadgets
Can't browse Gadgets on the MS Personalization/gadgets site
I have a few gadgets installed on my newest Win 7 Machine and went to the gadgets site to see what else was available. I get to the site and when I click on the link to get more gadgets and I just get to the personalization gallery so I click on the gadgets link and get back to where I started. ...
Gadgets
Gadgets - Restore Default Gadgets
How to Restore the Default Windows 7 Gadgets This will show you how to restore the desktop gadgets that come pre-installed with Windows 7. EXAMPLE: Gadgets Note: Some gadgets already uninstalled.
Tutorials
Gadgets - Change "Get more gadgets online" Link
How to Change the "Get more gadgets online" Link in Windows 7 This will show you how to change the default Get more gadgets online URL website link for specific or all users on the computer to any URL link that you would like it to open to in the defailt web browser instead. You must be...
Tutorials
Gadgets - Allow or Prevent Installation of Unsigned Gadgets
How to Allow or Prevent Installation of Unsigned Gadgets in Windows 7 This will show you how to allow to prevent all users in Windows 7 from installing gadgets that are not digitally signed to verify it's publisher. By default, both signed and unsigned drivers are allowed to be installed in...
Tutorials
Gadgets - Allow or Prevent User Installed Gadgets
How to Allow or Prevent User Installed Gadgets in Windows 7 This will will show you how to allow or prevent all users from being able to install a gadget or from adding a user installed gadget to the desktop in Windows 7. By default, user installed gadgets are allowed in Windows 7.When user...
Tutorials


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:00.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App