17 Year-Old Bug Leaves Microsoft Red Faced

by

Here’s an odd one, Microsoft have confirmed that a 17-year-old bug in the kernel of all 32-bit versions of Windows could be used by hackers to hijack PCs. ComputerWorld reports that the wholly un-reassuring news came to light when Google engineer, Tavis Ormandy discovered the vulnerability in the Windows Virtual DOS Machine (VDM) subsystem.

More 17 year-old pests...

The VDM subsystem was added to Windows with the July 1993 release of Windows NT, Microsoft’s first fully 32-bit operating system. VDM allows Windows NT and later to run DOS and 16-bit Windows software. An advisory from Microsoft earlier this week spelled out the affected software – all 32-bit editions of Windows, including Windows 7 – and told users how to disable VDM as a workaround. Windows’ 64-bit versions are not vulnerable to attack.

“An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode,” said the newest advisory. “An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.”

Jerry Bryant, a program manager with the Microsoft Security Response Center (MSRC), said that the company had not seen any actual attacks using the vulnerability, and also downplayed the threat if hackers do exploit the flaw. “To exploit this vulnerability, an attacker must already have valid logon credentials and be able to log on to a system locally, meaning they must already have an account on the system,” Bryant said in an e-mail.

Ormandy said that the vulnerability goes back nearly 17 years to Windows NT 3.1’s release, and exists in every version of Windows since. He reported the bug to Microsoft more than seven months ago.

Advertisements

Tags: , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: