EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

12.29.08

Windows Vista Left Vulnerable Over Christmas

Posted in Microsoft, Samsung, Security, Vista, Windows at 7:49 pm by Dr. Roy Schestowitz

Broken glass

AS WE POINTED OUT on Christmas day, Microsoft left its users/clients vulnerable over the holidays. But there’s actually more than we mentioned at the time. One of our readers points out that new flaws were found — accompanied by exploits — that can hijack Windows Vista and predecessors (Vista was never secure anyway).

The following exploit utilizes the XML vulnerability in Internet Explorer to execute arbitrary code under Vista.

Here is another new one:

A vulnerability was reported in Windows Media Player. A remote user can cause arbitrary code to be executed on the target user’s system.

Over at The Register, it is being reported that Samsung picture frames are dangerous to Windows users (“The disc is needed to use the kit as a USB monitor on windows XP machines”). We’ve covered the follies of Samsung in the past because they stabbed Linux in the back by signing a patent deal with Microsoft.

The BBC labels 2008 an unprecedentedly bad year for security, but surely it won’t get any better in 2009, not when about 40% of all (Windows) machines are zombies and many people are out of work.

Criminal gangs generate so many viruses for two main reasons. Firstly, many variants of essentially the same malicious program can cause problems for anti-virus software which can only reliably defend against threats it is aware of.

Bearing in mind everything that people already know and witness, the BBC does write: “The vast majority of these malicious programs are aimed at Windows PCs. Viruses made their debut more than 20 years ago but the vast majority of that million plus total have been created in the last two-three years.” It later shows the Windows logo above a caption that says “Most attacks are aimed at PCs running the Windows operating system.”

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

3 Comments

  1. Thomas Holbrook II said,

    December 30, 2008 at 5:18 am

    Gravatar

    This doesn’t surprise me in the least. It reminds me of the whole metafile fiasco in which users of Windows were left out in the cold for an entire year. Then Steve Gibson digs a bit deeper and discovers that it was not a bug, but yes… an actual feature. It was one of those things that probably sounded like a good idea at the time (though I personally can’t figure out for the life of me why pictures should be executing binary code in the first place), then was neglected for quite some time.

  2. aeshna23 said,

    December 30, 2008 at 9:01 am

    Gravatar

    I noticed that the vulnerabilities involved using Microsoft products on Vista. Now, I’m sure if one must use Vista or XP, you should Firefox and not IE for security. Should one also use foobar2000 or dbpowerAmp instead of Windows Media Player? I have my suspicions that MS own programs tend to be security risks on Windows platforms than do third party applications–not simply because the hackers hack them more, but by corporate policy of giving these programs greater privileges than ordinary (and sensible) programmers would. Does anyone know if this is the case?

  3. Roy Schestowitz said,

    December 30, 2008 at 9:31 am

    Gravatar

    “I have decided that we should not publish these extensions. We should wait until we have a way to do a high level of integration that will be harder for the likes of Notes, Wordperfect to achieve, and which will give Office a real advantage.”

    Bill Gates [PDF]

    Enough said.

    Think about ActiveX too. It’s about binding the Web browser and Web sites to one operating system.

    “Another suggestion In this mail was that we can’t make our own unilateral extensions to HTML I was going to say this was wrong and correct this also.”

    Bill Gates [PDF]

What Else is New


  1. Links 31/5/2016: Linux Lite 3.0, Alpine 3.4.0, Krita 3.0

    Links for the day



  2. Data Mining Company: EPO is Like Suicide

    LinkedIn, one of several giants that spy on people to determine what's on their mind and what's similar to them, has yielded the above (for EPO)



  3. Patents Roundup: When the Patent Systems Turn Against People and Adjust According to Patent Lawyers and Their Largest Clients

    A look at the Singaporean, US, and Chinese patent systems, which are all becoming more aggressive and more disconnected from public interests, in favour of large multinational corporations



  4. Microsoft's Former Chief Patent Counsel Praises Elevation of Software Patents in Microsoft Case, Adds to Cherry-Picking and Lobbying by Patent Lawyers

    Microsoft, which is renowned (or notorious) for patent extortion against Linux, is still a big contributor to software patenting policy and Shelston IP -- much like Microsoft's front groups -- pretends to speak for small businesses in an effort to spread software patents outside the US (in spite of Alice)



  5. Extremely Dodgy Dealings at the European Patent Office

    Yet another dodgy contract between Battistelli's EPO and private contractors overseas, this time in an effort to whitewash or cleanse the image of the EPO's current regime



  6. The EPO's Media Partners Like Les Echos Already Produce EPO Puff Pieces (Marketing/Stenography)

    EPO promotion disguised as reporting or journalism, as seen in the media partners of the EPO well before these partnerships even begin



  7. Unitary Microsoft: EPO Excludes People Who Are Not Microsoft Customers From UPC Participation

    The EPO just can't help providing special treatment to Microsoft, not only when it comes to patent applications but also when it comes to rejecting stakeholders/applicants who dare not become Microsoft customers



  8. Links 30/5/2016: Linux 4.7 RC1, Best Linux Distros

    Links for the day



  9. Make Nothing, Sue Everybody: The Reality of Patent Trolls Increasingly Understood by the 'Mainstream'

    New patent stories and even extensive coverage at PBS, which dedicated a whole program to these matters but failed to address the core issue, which is software patenting



  10. [ES] Advertencia: La Vigilancia de la EPO Surveillance Puede Haberse Convertido en Más Intrusiva

    BlueCoat, que la EPO usa para oprimir a sus empleados en sus premisas Europeas, acaba de ajustar más y hacerse más intrusiva y los empleados pueden estar en riesgo



  11. [ES] Tarjeta de Victima Termina en Otra Torpeza para Battistelli Seis de su Guardia Pretoriana

    Battistelli esta destruyéndo lo que queda de la reputación de la EPO (después de las décadas que le costó a ella construírla) mientras los medios continúan escrutinando su desastroso régimen



  12. [ES] La EPO esta Excelente, Dice Sitio de ‘Noticias’ Conectado a Ella

    Los caraduras de la ‘revista’ IAM, viejo aliado de la EPO, da la impresión a la gente de que en la EPO todo esta bien y dandy aunque claramente ese no es el caso



  13. New EPO Caricature: Nouveaux Garde-Vélo (New Bicycle Guards)

    A new cartoon poking fun at Battistelli's bicycles and the perceived threat these are under



  14. Battistelli's 'Special Relationship' With Portugal and the 'Inventor of the Year' Charade

    What makes Portugal rather unique when it comes to Mr. Battistelli, who is allegedly desperate for support from smaller countries whose vote is easier to 'win'



  15. Patent Lawyers' Marketing Dominates and Marginalises Meaningful Analyses of Software Patenting in the US

    In an effort to create demand for software patents again, patent lawyers produce a huge heap of so-called 'analyses' which piggyback just one single decision (the exception, not the norm)



  16. A Mix of Patent Aggression and Sanctions/Raids (Using Controversial Patents) Against East Asian Companies

    New stories that demonstrate patent protectionism and show how Western industry, which barely makes anything anymore, relies on patents (software and design patents included) and this self-serving patent regime perpetuates itself even in Asia, where almost everything is actually being manufactured (and often/increasingly designed/developed too)



  17. Rumour: Battistelli Wants to Extend the Term of Topić's EPO Appointment in Spite of Criminal Charges Against Him

    The EPO's 'ringleader', Mr. Battistelli, is trying to keep his confidants (like Mr. Minnoye and Željko Topić) together for several more years to come, even defying rules regarding retirement age



  18. Links 29/5/2016: NetBSD 7.0.1, Genode OS 16.05

    Links for the day



  19. [ES] La Gerencia de la EPO Bajo Creciénte Estres por las Autoridades Legales Croatas, Políticas Alemanas, y los Medios Italianos

    Las cosas no son color rosa como la calma relativa sugiere, y esperamos en las próximas semanas mayores eventos otros que la protesta en todas las sedes de la EPO a través de Europa



  20. [ES] Los Medios de Comunicación Comienzan a Informar al Público Europeo Acercas de las Desventájas de la UPC Mientras que la EPO Acelera su Cabildeo por Ratificación

    La vergonzósa promoción de la UPC por parte de la EPO da otro paso adelánte mientras que venues de la prensa Europea (incluso canales de televisión) comienzan a explorar el arreglo secreto que es negociado por los abogados de patentes (con clientes corpórativos) y las oficinas de patentes, no el público o cualquier grupo que represente los intereses del público en general



  21. [ES] Algunos Detalles Acerca de ¿Cómo el Presidente de la EPO Es Rumoreado Estar Comprando Votos, y el Porqué es Suficientemente Base Para un Despido Inmediato?

    Algo de información tras las cortinas y una detallada explicación de la dependencia finánciera sistemática, creada por Battistelli a un costode €13 millónes o más, la cuál evita una efectiva supervisión de Battistelli



  22. Mishi Choudhary and Mike Masnick Explain Why India Should Reject Software Patents

    Both an Indian activist-lawyer and a widely-recognised author from the US explain to Indians why over-reliance on patents -- and acceptance of patents on software in particular -- is a very bad idea



  23. Microsoft Boosters Pretend Microsoft Fights for Privacy While the Company Uses Malware Tactics to Put Keyloggers on Everyone's Computers

    In spite of malware-inspired tactics that should land Microsoft in courts of law all around the world (as a defendant), Microsoft-friendly circles pretend that the company fights for people's rights like privacy -- all this when Microsoft installs keyloggers on people's PCs without their consent and obviously against their will



  24. Battistelli's Assault on EPO Staff's Right to Strike in Relation to French Politics and That 'Bicycle' Pretext for Crackdowns

    The latest bicycle 'gossip' and how it's being used, based on expectations from EPO staff, to introduce further crackdowns on human/labour rights



  25. Vice-President of the EPO Under Investigation: Treason, Abuse, Violations, Giving and Receiving Bribes

    An English translation of documents involving the Organised Crime Section of the Criminal Police Department in Zagreb, where the Vice-President of the EPO faces criminal charges



  26. EPO Management Warns People About Scams When the EPO's Management is Itself Falling for Scams

    Jesper Kongstad, the Chairman of the Administrative Council of the European Patent Organisation, helps demonstrate that not even the EPO is intelligent enough to spot an obvious scam



  27. Links 28/5/2016: Wine 1.9.11, New Gentoo

    Links for the day



  28. Links 27/5/2016: Android for Raspberry Pi, Google Beats Oracle in Court

    Links for the day



  29. Warning: EPO Surveillance May Have Just Gotten Even More Intrusive

    BlueCoat, which the EPO uses to enable oppression inside its European premises, has just gotten even nastier and staff may be at risk



  30. Victim Card Ends up in Another Blunder for Battistelli and His Six Bodyguards

    Battistelli is wrecking what's left of the EPO's reputation (after decades it took the Office to earn it) as the media continues to scrutinise his appalling regime


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts