Windows plagued by 17-year-old privilege escalation bug

[JMH]

A security researcher at Google is recommending computer users make several configuration changes to protect themselves against a previously unknown vulnerability that allows untrusted users to take complete control of systems running most versions of Microsoft Windows.
The vulnerability resides in a feature known as the Virtual DOS Machine, which Microsoft introduced in 1993 with Windows NT, according to this writeup penned by Tavis Ormandy of Google. Using code written for the VDM, an unprivileged user can inject code of his choosing directly into the system's kernel, making it possible to make changes to highly sensitive parts of the operating system.

Source -
Windows plagued by 17-year-old privilege escalation bug ? The Register

 

[dmex]

All 32-bit versions of all Windows are vulnerable. :shock:

 

[thibault]

what if you have 64-bit?:sarc:

 

[dmex]

what if you have 64-bit?:sarc:

64bit doesn't come with the Virtual DOS Machine (VDM) or 16bit support, its not vulnerable

 

[CoolioG]

Meh, 32-bit sucks anyways.

 

[Lebon14]

Meh, 32-bit sucks anyways.

Hum hum!
I AM RUNNING 32-bits. Get back those words . That's the only machine I can use, I don't have money to upgrade even if I dream to. OK? It's NOT everyone that can or want to go 64-bits!

 

[smiths22]

What it sucks even more is that there is not 64 bits versions for all the windows software out there.

 

[JordanJP]

What it sucks even more is that there is not 64 bits versions for all the windows software out there.

well the market is now embracing 64bit computing much better than it did in the past. Within a year or 2 expect a fade out of 32bit.

 

[KazeNoKoe23]

Meh, 32-bit sucks anyways.

So much for the netbook market. Shame too, it seemed like such a good idea.

 

[Zidane24]

Meh, 32-bit sucks anyways.

So much for the netbook market. Shame too, it seemed like such a good idea.

I actually wouldn't use the sarcasm here...the netbook market has flared up and died down while multiple articles out there posting how the marketing focus is shifting from netbooks to just lightier notebooks...

In essence they are calling the netbook almost dead...besides we all know that the Atom CPU will be 64-bit in not to long if netbooks catch back up

 

[Zidane24]

Of course this doesn't help folks like Lebon14 who can't afford to take the plunge to 64-bit and now find themselves...stuck

 

[Mitch656]

I can run a 64bit OS, but i find it that i got no advantages to it, and since a lot of applications are not comptabile i will stick with 64bit until forced to swap or i get some sort of advantage

 

[JordanJP]

Meh, 32-bit sucks anyways.

So much for the netbook market. Shame too, it seemed like such a good idea.

I actually wouldn't use the sarcasm here...the netbook market has flared up and died down while multiple articles out there posting how the marketing focus is shifting from netbooks to just lightier notebooks...

In essence they are calling the netbook almost dead...besides we all know that the Atom CPU will be 64-bit in not to long if netbooks catch back up

Hmm I was never aware that the "netbook market" has died, I thought ultraportables were extremely popular ?

 

[JordanJP]

I can run a 64bit OS, but i find it that i got no advantages to it, and since a lot of applications are not comptabile i will stick with 64bit until forced to swap or i get some sort of advantage

Well as I said earlier Mitch656, 64bit computing is increasingly becoming popular, and you'd be surprised at the number of applications coming out everyday that actually do support 64bit. Unfortunately as of yet, there is no native 64bit Adobe Flash, however expect one in the not too distant future.


Anyway 64bit is the Future !


Seeing how my shitty laptop actually supports 64bit, (AMD Athlon TL-21 1.6GHz), I am taking full advantage of it, I've also got 4GB of RAM installed and I must say even thought I've got one processor, I do notice a difference in overall speed. I find it better responsiveness compared to 32bit. Anyways, soon enough I'll be replacing my current laptop with a high powerful one, of course when that time comes I'll be already on the 64bit bandwagon !


Cheers

 

[Pieloi]

The only program I really wanted, seriously badly in 64bit was Algodoo phun

 

[bobcamel]

you can already get dual core atom processors. I believe it is 1.6 Atom 330 processor. Used in nettops, and soon to be used in netbooks. bam 64 bit.

 

[dmex]

Windows 7 is supposed to be the last 32bit Windows client, I hope it is but I doubt it.

Windows x64 is hideously slower than it should be thanks to all these 32bit compatibility hook layers, I hope there's a "Windows Feature' to remove all 32bit support from Windows 8 so we can start to see some real adoption, performance and especially security from x64.

 

[Jacee]

I still use 32bit on XP, Vista Business and Win 7 ... I prefer it, but I know others like 64bit.

Proper Windows updates, program updates (Adobe & Java), knowing your security applications, and firewall are configured right ... you can be protected.

It's what you don't know that will grab and own your computer. Learn all you can about 'safe surfing' and dowloads.

 

[davwilli]

"This vulnerability cannot be exploited remotely. Furthermore an attacker must already have access to a Windows computer containing a vulnerable version of the operating system. Moreover, the attacker would also need access to an account on that computer. Remote attacks are not possible, and the user must have an account or access to an account on the system in question."

Does not sound like too serious a threat for the average user.

 

[Airbot]

An update to fix this should be coming next Tuesday.

The Microsoft Security Response Center (MSRC) : February 2010 Bulletin Release Advance Notification

Advisory 979682