EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

12.29.08

Windows Vista Left Vulnerable Over Christmas

Posted in Microsoft, Samsung, Security, Vista, Windows at 7:49 pm by Dr. Roy Schestowitz

Broken glass

AS WE POINTED OUT on Christmas day, Microsoft left its users/clients vulnerable over the holidays. But there’s actually more than we mentioned at the time. One of our readers points out that new flaws were found — accompanied by exploits — that can hijack Windows Vista and predecessors (Vista was never secure anyway).

The following exploit utilizes the XML vulnerability in Internet Explorer to execute arbitrary code under Vista.

Here is another new one:

A vulnerability was reported in Windows Media Player. A remote user can cause arbitrary code to be executed on the target user’s system.

Over at The Register, it is being reported that Samsung picture frames are dangerous to Windows users (“The disc is needed to use the kit as a USB monitor on windows XP machines”). We’ve covered the follies of Samsung in the past because they stabbed Linux in the back by signing a patent deal with Microsoft.

The BBC labels 2008 an unprecedentedly bad year for security, but surely it won’t get any better in 2009, not when about 40% of all (Windows) machines are zombies and many people are out of work.

Criminal gangs generate so many viruses for two main reasons. Firstly, many variants of essentially the same malicious program can cause problems for anti-virus software which can only reliably defend against threats it is aware of.

Bearing in mind everything that people already know and witness, the BBC does write: “The vast majority of these malicious programs are aimed at Windows PCs. Viruses made their debut more than 20 years ago but the vast majority of that million plus total have been created in the last two-three years.” It later shows the Windows logo above a caption that says “Most attacks are aimed at PCs running the Windows operating system.”

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

3 Comments

  1. Thomas Holbrook II said,

    December 30, 2008 at 5:18 am

    Gravatar

    This doesn’t surprise me in the least. It reminds me of the whole metafile fiasco in which users of Windows were left out in the cold for an entire year. Then Steve Gibson digs a bit deeper and discovers that it was not a bug, but yes… an actual feature. It was one of those things that probably sounded like a good idea at the time (though I personally can’t figure out for the life of me why pictures should be executing binary code in the first place), then was neglected for quite some time.

  2. aeshna23 said,

    December 30, 2008 at 9:01 am

    Gravatar

    I noticed that the vulnerabilities involved using Microsoft products on Vista. Now, I’m sure if one must use Vista or XP, you should Firefox and not IE for security. Should one also use foobar2000 or dbpowerAmp instead of Windows Media Player? I have my suspicions that MS own programs tend to be security risks on Windows platforms than do third party applications–not simply because the hackers hack them more, but by corporate policy of giving these programs greater privileges than ordinary (and sensible) programmers would. Does anyone know if this is the case?

  3. Roy Schestowitz said,

    December 30, 2008 at 9:31 am

    Gravatar

    “I have decided that we should not publish these extensions. We should wait until we have a way to do a high level of integration that will be harder for the likes of Notes, Wordperfect to achieve, and which will give Office a real advantage.”

    Bill Gates [PDF]

    Enough said.

    Think about ActiveX too. It’s about binding the Web browser and Web sites to one operating system.

    “Another suggestion In this mail was that we can’t make our own unilateral extensions to HTML I was going to say this was wrong and correct this also.”

    Bill Gates [PDF]

What Else is New


  1. New EPO Protests Amid Nervous Breakdowns of Spanish EPO Employee (After Institutional Bullying by Battistelli's Goons), Spain Rejects the Unitary Patent (UPC)

    In the face of enormous pressure from non-technical Eurocrats like Battistelli, Spain remains strong and resists the Unitary Patent Court (UPC), which puts more power in the hands of an abusive body that grossly discriminates against Spaniards



  2. Only Half a Dozen Cuban Patents Filed at EPO, But Hugely Unpopular Battistelli Goes to Cuba to Garner Cheap Support

    Now that Spain is antagonising the EPO (and especially the UPC) the President of the EPO helps create some puff pieces in Spanish as he visits Cuba and neighbouring Spanish-speaking nations which are historically renowned for defunct governance and lawlessness (like the EPO itself)



  3. Nepotismo de la UPC, Abusos Políticos, y el Envolvimiento en la UPC de la Firma ¨Legal¨ que la OEP Contrato para Matonear a Techrights

    La Corte Unitaria de Patentes UPC, un sistema arregaldo esta siendo embestida por la gargant de Europa por la OEP. (Nos están metiendo la yuca). Sus grandes clientes (incluso extranjeros), con sus abogados de patentes para que todo el mundo los vea.



  4. Miembro del Parlamente Europe Resalta ¨Las Continuas Violaciones de los Fundamentales Derechos de los Empleados de la OEP¨

    Pregunta a la Comisión Europea de parte de la MEP Portuguesa Ana Gomes, publicado en el sitio del Parlamente Europeo.



  5. Links 11/2/2016: LibreOffice 5.1, HMRC and FOSS

    Links for the day



  6. Microsoft Continues to Use Software Patents to Extort/Blackmail Even More Companies That Use Linux, Forcing/Coercing Them Into Preinstalling Microsoft

    Acer is the latest large OEM to have become a victim of Microsoft's witch-hunt against Android/Linux preloaders, whom Microsoft is coercing into becoming Microsoft's carriers (or face litigation over software patents, with high legal fees if not injunctions or high damages upon secret settlements)



  7. EPO Brain Drain (Even Directors Fed Up With Team Battistelli) and Rumours About Battistelli Becoming President of the UPC

    Words heard through the grapevine of the European Patent Office (EPO), where staff is overwhelmingly against the managers and some people, including high-profile staff, add to the exodus



  8. More Than 20 Years in the Line: European Patent Office and Claims of European Convention on Human Rights Infringement Against Applicants/Stakeholders

    Gross incompetence and potentially an infringement of the European Convention on Human Rights at the European Patent Office (EPO), this time impacting an applicant (one of many in a similar position)



  9. UPC Nepotism, Political Abuses, and UPC Involvement From the Legal Firm That EPO Hired to Bully Techrights

    The Unitary Patent Court (UPC), a rigged system that is being rammed down Europe's throat by the EPO, its big clients (even foreign), and their patent lawyers laid bear for people to see



  10. Member of European Parliament Brings Up “Ongoing Violations of the Fundamental and Employment Rights of the Staff of EPO”

    Question to the European Commission from Portuguese MEP Ana Gomes, as published in the site of the European Parliament



  11. La Oficina Europea de Patentes Pretende que No Pasa Nada y Prepara una Feria de Vanidad

    La estrategia de relaciones públicas de la OEP cuya destructiva estrategia de patentes continua sin disminución (por ahora), se engancha en Colombia y se esfuerza en manufacturar el mito donde el público, examinadores de patentes, y aplicantes de patentes todos estan muy felices con la OEP.



  12. La ‘Internacional’ Commisión de Comercio Impone/Reenfuerza Patentes de Software para Establecer Otro Embargo

    La Comisión Internacional (sic) de Comercio se esta entrometiendo en competición de nuevo permitiendo a un gigante de los Estados Unidos Ciso en este caso, a potencialmente bloquear rivales (no importaciones del extranjero) usando patentes de software.



  13. Links 9/2/2016: Linux in Robotics, Hyperledger Project

    Links for the day



  14. Besieged Benoît Battistelli Mimics 'Damage Control' Tactics of FIFA or Blatter as More Judges Start Getting Involved in EPO Scandals

    Rumours and a new rant from Battistelli reinforce suspicions that actions are being organised behind the scenes, possibly as part of an upcoming, high-level campaign to unseat/dethrone Battistelli, who has become a reputational disaster to the European Patent Office (EPO), much like Sepp Blatter at FIFA



  15. Several Political Parties Directly Challenge the European Patent Office for Ignoring the Law, Not Obeying Court Orders

    Politicians make it crystal clear that the EPO, despite its unique status, cannot just raise its nose at the rulings of courts of law, definitely not in Dutch territory where the EPO operates



  16. Even the Legal Community is Upset at Benoît Battistelli for the Damage He Did to the EPO

    A recent article from lawyers' media (in German) speaks of the great damage (or mess) left by its current president, who has become somewhat of a laughing stock and growingly synonymous with farcical trials even in the circles of stakeholders, not just his own staff



  17. EPO Union (SUEPO) Getting Busted: “More and More People are Joining the Union, but Fewer and Fewer People Dare to Take on Leading Positions There.”

    The union-busting actions taken by EPO management in collaboration with Control Risks (for weak accusations against staff representatives) and FTI Consulting (for 'damage control') as described in a recent article, in the words of SUEPO lawyer Liesbeth Zegveld



  18. Microsoft's Copyrights- and Patents-Based Attacks on GNU/Linux Carry on

    The SCO case is still going on and Microsoft has just signed a patent deal with GoPro over its FOSS-based software, relating to “certain file storage and other system technologies”



  19. The EPO's Benoît Battistelli is the Dictator Who Can No Longer Dictate Like He Used to

    The European Patent Office's mechanism of oversight is starting to work just a little because, based on a new report from Juve, Battistelli is now reluctant to make proposals that would prove unpopular among delegates



  20. La Más Detallada Explicación (hasta ahora) de ¿Qué esta mal con la OEP?

    La insistencia de la OEP que permanece arriba de la ley no sólo est bajo fuego en los medios pero también esta siendo desafiada basado en personas familiares con la aplicabilidad de la ley a organizaciones internacionales.



  21. Links 8/2/2016: Vista 10 Nags Help GNU/Linux, Nautilus Updated

    Links for the day



  22. The European Patent Office “is Acting as Though the Law Does Not Apply to It.”

    An article from Nieuwsuur which provides the words of Liesbeth Zegveld (for SUEPO) and Guillaume Minnoye (for the European Patent Office), reaffirming the EPO's bizarre notion that it is above the law, even in the face of human rights violations and a court ruling against the EPO



  23. Microsoft-Connected FRAND Lobbying (Software Patents Against Free/Open Source Software) in Brussels

    Anti-Free/Open Source software (FOSS) talking points and FRAND (anti-FOSS) lobbying groups in Brussels as seen by proponents of FRAND, who also worked for Microsoft



  24. Latest Propaganda From the EPO's Management an Effort to Make the EPO the Tool of Megacorporations

    A quick roundup of some of the latest spin and paid-for (bought) coverage that helps introduce a distorted patent system whose beneficiaries are not European (or even people)



  25. 'Aversion to Change' Propaganda From the EPO Echoes or Parrots Lenin and Stalin

    The out-of-control EPO management is trying to fool the media by blaming staff representatives for getting fired, simply because they stood up to a highly abusive and megalomaniacal dictator



  26. The Gates Foundation Subjected to Criticism, But Over a Decade Too Late

    Reckoning and accepting the fact that even some in the media now openly speak about Bill Gates' corrupting influence in everything, including politics



  27. Links 8/2/2016: Zenwalk 8.0 Beta 2, Q4OS 1.4.7

    Links for the day



  28. SIPO (China's Patent Office) Taken Over by Patent Maximalists

    A look at China's race to the bottom (decline in quality) when it comes to patents, assuming quite wrongly that quantity is more important than quality and severe penalties for perceived infringement will spur innovation



  29. The Alice Case Continues to Smash Software Patents (This Time OpenTV's); Will the EPO Ever Pay Attention?

    The potency or the grip of software patents in the United States is quickly eroding, but the EPO continues to act as though software patents are legitimate



  30. EPO Staff Responds to Team Battistelli's Expansion to Include French Economic Propagandist on the Payroll

    With strings attached (like string puppets of Battistelli in various units including the Investigative Unit), can the new Chief Economist, who is French and paid by Battistelli, ever be trusted?


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts