Microsoft probing Windows 7 zero-day hole
Summary
Microsoft said it is looking into a report of a vulnerability in Windows 7 and Server 2008 Release 2 that could be used by an attacker to remotely crash the computer.
Topics
Microsoft said on Wednesday it is looking into a report of a vulnerability in Windows 7 and Server 2008 Release 2 that could be used by an attacker to remotely crash the computer.
The company is investigating claims of a "possible denial-of-service vulnerability in Windows Server Message Block (SMB)," the Microsoft spokesperson said, adding that the company was unaware of any attacks trying to exploit the hole.
The bug triggers an infinite loop on the Server Message Block (SMB) protocol used for sharing files in Windows, researcher Laurent Gaffié wrote in a posting on the Full-Disclosure mailing list and on a blog.
For more, read "Microsoft probing Windows 7 zero-day hole" on CNET News.
Talkback Most Recent of 47 Talkback(s)
-
I hope Jeremy got some sleep last night
because he probably won't be getting much in the near future.
Michael Kelly12th Nov 2009 -
It didn't take long, did it?
Let's see...it was released, when? Oct. 22nd?
Wintel BSOD13th Nov 2009 -
first of many zillions
is there anything worse than being MS security programmer?
poor bastards.
ljenux-2304376600766755823441610560426512th Nov 2009 -
Remember yesterdays Mac update
I seem to remember that Mac put out an OSX update that covered over 50 security fixes. Just think if they had a user base world wide bigger than the PC base in New York. A hackers dream!
spaul4012th Nov 2009 -
So how does the Mac update make this MS flaw acceptable?
Yeah ... this Windows flaw only effects hundred of millions!
The hackers ultimate dream is already here, its Windows.
So explain how the Mac OSX patches makes this major Windows security
flaw more acceptable?
john_gillespie@...12th Nov 2009 -
After you show where he made such a claim.
So how does the Mac update make this MS flaw acceptable?
I saw no such claim.
ye12th Nov 2009 -
You see nothing...
As usual...Wintel BSOD13th Nov 2009 -
Probably because he doesn?t hallucinate
unlike you
count trouble13th Nov 2009 -
No, he's blind as a bat
Must've been those glasses you supplied him...
lol...
Wintel BSOD14th Nov 2009 -
RE: Microsoft probing Windows 7 zero-day hole
adding that the company was unaware of any attacks trying to exploit the hole.
So its not a problem yet and Microsoft is taking the steps to ensure it doesn't become a problem in the future. I love this proactive approach to security by Microsoft!
Loverock Davidson12th Nov 2009 -
re:RE: Microsoft probing Windows 7 zero-day hole
"So its not a problem yet and Microsoft is taking the steps to ensure it doesn't become a problem in the future."
"Remote SMB Exploit: Crashing Windows 7 and Server 2008"
Demonstration
Our victim targets are:
1. A Windows 7 Professional workstation with latest patches.
2. A Windows Server 2008 R2 Standard Core Edition with latest patches.
^o^
n0neXn0ne12th Nov 2009 -
To download patches on Tuesday!
?And why would you surf the net from a production server anyway!?
To download patches on Tuesday!
^o^
Posted by n0neXn0ne
Really, that's your response? you're mistaken. there is no need to go to any sites to get the latest ms updates, security or otherwise.
the Windows Update (inside Control Panel) requires no such web browsing for updates.
whoflungdung12th Nov 2009 -
So you don't know what proactive is do you
They are reacting to a risk that was brought to their attention.
If you hired a house keeper that left your front door open when leaving, you would say its no problem?
I am not taking a shot at MS as this is bound to happen with any OS. I'm taking a shot at you for not holding MS to the same standard you would hold the other OSes.
It is too soon to say it is or is not a problem until they discover whether the claim is real or not. If the vulnerability is real, then it is a real problem that will need a fix. If it can be done prior to any incidence, congrats to MS for fixing a PROBLEM prior to it being exploited.
Viva la crank dodo12th Nov 2009 -
someone should ban you already
...when they didn't do it proactively...ljenux-2304376600766755823441610560426512th Nov 2009 -
How does this make it past the default firewall?
Thanks in advance for letting me know how a "bad guy" can make it past my NAT router, past my firewall, and then crash my machine through a service that is off by default.
NonZealot12th Nov 2009
Talkback - Tell Us What You Think
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
Facebook Activity
