vista vulnerability

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Should Microsoft downgrade Vista vulnerabilities?

Should Microsoft downgrade Vista vulnerabilities?Pretty ballsy of him to have thatbumper sticker on his laptop. Guess he is a glutton for punishment, eh?! ]:)attacks exclusive to windows vista...From what i've read, the amount of DRM on Vista will serve as a springboard for a new breed of attack, and a...

Tags: Microsoft Windows Vista (Longhorn), Operating systems, Cyberthreats, SECURITY, paranoia, Microsoft Windows Vista, Microsoft Windows, Vista vulnerability, attack, virus, Linux, Microsoft Corp.

Discussion threads 2007-03-12

Additional Resources

Exploit published for critical IE 7 zero-day flaw

Do you mean:"The vulnerability was confirmed on fully patched Windows XP SP3 systems with Internet Explorer 6 and [b]7[/b]."Also how effective is the exploit with Protected Mode and limited user account usage? I'd like to see more information on how these two mitigation techniques work against exploits. I suspect the...

Tags: Web browsers, EXPLORER, Microsoft Security Essentials, Microsoft Internet Explorer, critical IE 7 zero-day flaw, IE 7 zero-day flaw, Microsoft Internet Explorer 7, zero-day bug, exploit

Discussion threads 2009-11-23

Microsoft confirms 'detailed' Windows 7 exploit

Ummm interesting....so just block 139 and 445...445? great that port aggain.Is SMB blocked to/from internet by th firewall by default?RE: Microsoft confirms 'detailed' Windows 7 exploitPorts 139 and 445 are blocked by default for Internet access by Windows firewall in Windows 7 and any commerical hardware firewall. They are enabled...

Tags: Firewalls, SMB/SME, SMB protocol, Microsoft Windows 7, firewall, Windows 7 exploit, Microsoft Windows, small and medium business, Microsoft Windows Vista, operating system, Microsoft Corp.

Discussion threads 2009-11-16

Major online ad site hacked, serving up exploit cocktail

One more reason to use FirefoxUse Firefox with AdBlock Plus and a simple filter of *media-servers.net* and the problem is solved.I am not sure that they are "major" as I did not have a filter for them.AgreedYet, I bet the web hosts will STILL complain about it. RE: Major online...

Tags: Cyberthreats, Spyware, adware & malware, Viruses and worms, Confession, online advertising, Microsoft Windows, Ryan

Discussion threads 2009-11-10

Counting vulnerabilities is pointless

Suddenly it doesn't matter any more? Vulnerability count is an indication of software qualityIt goes directly to the process the vendor went through to root out vulnerabilities before shipping. At least if you compare products with the same general purpose and which receives the same amount of scrutiny.Time to fix...

Tags: Web browsers, Cyberthreats, Spyware, adware & malware, SECURITY, Mozilla Firefox, vulnerability, Microsoft Internet Explorer, malware, risk period

Discussion threads 2009-11-09

Windows 7 security default worries experts

How many Windows 7 does it take...How many dribble articles about Windows 7 canthere be in one week.I heard Windows 7 is now helping the economy andit has changed global warming to global cooling.So the polar bears are now SAFE!!! Way to go Windows 7 it is like the messiah...

Tags: Operating systems, Ubunutu, Microsoft Windows 7, security, Microsoft Windows, Microsoft Corp., Win7

Discussion threads 2009-10-22

News to know: Apple; Alex; Microhoo; Droid; FCC

Here are today's notable headlines. You can get News To Know via email alert and RSS daily. For continuous updates see BNET's around-the-Web tech coverage. Sam Diaz: Another strong quarter for Apple; credit strong iPhone, Mac sales Jason D. O'Grady: Apple announces most profitable...

Tags: FCC, Google Inc., Larry Dignan, Advertisement, Information Technology, Dana Blankenhorn, Mary Jo Foley, Apple Inc., Microsoft Corp., Adrian Kingsley-Hughes, Sam Diaz, Microsoft Windows 7, Microsoft Windows, E-books, Federal Government, Service-Oriented Architecture (SOA), Operating Systems, Software, Personal Technology, Government, Web Services, Enterprise Software

Blog posts 2009-10-20

Microsoft: Human error caused critical SMB2 vulnerability

did not explain why the fix was not back-ported to Windows Vista and other That very bad. I was wondering this myself when news broke that Win 7 was not vulnerable.What were they thinking? Fixing a bug and "forgetting" that other versions may actually be vulnerable?Or had they actually recorded...

Tags: Microsoft Windows Vista (Longhorn), SECURITY, Hulu Desktop, Microsoft Corp., critical SMB2 vulnerability, SMB2, SMB2 vulnerability, vulnerability, Microsoft Windows Vista

Discussion threads 2009-10-19

Patch Tuesday: MS plugs critical IE, Windows Media Player holes

Is MS going to pay for my Gb/month overage?With ISPs grasping for profits I see the day when the "download cost" of these mega-patches become an issue!RE: Patch Tuesday: MS plugs critical IE, Windows Media Player holesWow, my Microsoft software is sure to be secure now.GOOD JOB!If only other manufacturers...

Tags: Patches, Microsoft Internet Explorer, media player, patch management, Adobe Systems Inc., Microsoft Corp.

Discussion threads 2009-10-13

New Adobe PDF flaw under attack; Patch coming Tuesday

Note to all Knuckleheads....The vulnerability affects Adobe Reader and Acrobat 9.1.3 and earlier versions on Windows, Macintosh and UNIXWhy announce at all? Just fix the thingI'm getting really tired of any company that gives the ostensibly obligatory "We're on that!" and then it's some time before the fix comes. These...

Tags: Operating systems, SECURITY, Microsoft Windows, Windows IS, Adobe PDF flaw, flaw, Adobe PDF, operating system, Adobe Systems Inc., attack

Discussion threads 2009-10-09

Google Chrome update doesn't remove older, vulnerable version

But how would an attacker cause the vulnerable code to execute?Frankly, this seems to be a minor issue. If you are launching Chrome you will launch the latest version. The older version is just cruft. I don't see any scenario where you inadvertently or an attacker can execute the older...

Tags: Microsoft Windows, Web browsers, SECURITY, IE8, Chrome, Google Chrome, Google Inc.

Discussion threads 2009-10-01

Windows SMB2 exploit now public; Expect in-the-wild attacks soon

Another "researcher" makes a name for himself.So, just why was it necessary for for this Bozo to actually "create and release the code" for the exploit? Let me guess. His company makes money by hyping up the level of fear. See their web page where they say...

Tags: Firewalls, SECURITY, Network security, Patches, Microsoft Windows, Windows SMB2, attack, firewall, antivirus

Discussion threads 2009-09-29

Malware affiliate bounty: Infect a Mac, earn 43 cents

It's just what Apple deserves.Apple has long implied that its OS and software are inherently immune to attack. It's about time it and Mac owners were brought up short.It has begun...Now to see how long it will take before the Mac is as beset by malware as Windows.RE: Malware affiliate...

Tags: Spyware, adware & malware, Cyberthreats, Desktops, Viruses and worms, bounty, Apple Macintosh, malware, Microsoft Windows, security

Discussion threads 2009-09-25

When it comes to security, who do you trust more - Microsoft or Google?

Given their experience it has to be Microsoft.{NT}RE: When it comes to security, who do you trust more - Microsoft or Google?IMHO, Open Source applications are inherently more secure, with far more people pouring over the code.Closed source simply has the undiscovered flaws.Given that they design and make the OS...

Tags: Web browsers, Microsoft Corp., security, Google Inc., secure, plug-in

Discussion threads 2009-09-25

Microsoft ships one-click 'workaround' for critical SMB2 flaw

With exploit code in circulation and facing a race against time to fix the SMB v2 vulnerability haunting Windows Vista and Windows Server 2008, Microsoft has shipped a one-click "fix-it" workaround to help users avoid malicious hacker attacks. by Ryan Naraine

Tags: Workaround, Flaw, Microsoft Corp., Microsoft Windows, Microsoft Windows Server 2008, Smb/Sme, Hacking, Security, Operating Systems, Software, Ryan Naraine

Blog posts 2009-09-18

Sun patches 'critical' StarOffice/StarSuite flaw

Sun patches Openoffice.org with 3.1.1The security problem in "CVE-2009-0200 / CVE-2009-0201: Manipulated Microsoft Word files can lead to heap overflows and arbitrary code execution" was patched in Openoffice.org in version 3.1.1.http://www.openoffice.org/security/bulletin.htmlMikeOpen_Office is FREEIf you run a Linux distro with Open_Office you are immune from 99.99% of this Windows silliness....So, Linux...

Tags: Operating systems, UNIX, Microsoft Windows, OPEN SOURCE, PRODUCTIVITY, Cyberthreats, Linux, Sun Microsystems Inc., patch management

Discussion threads 2009-09-18

PBS.org hacked, serving malware cocktail

They must be running linux.yes, they are running LinuxSurprise, Linux is not immune...However, to be fair this hack was likely through some application layer vulnerability, not a Linux exploit, unless the admin is really inept. Most likely a SQL injection attack.Linux nor Windows are really hackable when set up as...

Tags: UNIX, Operating systems, OPEN SOURCE, malware, Linux, Foxit Reader, PBS

Discussion threads 2009-09-18

Remote exploit released for Windows Vista SMB2 worm hole

Time for an out-of-cycle patch Microsoft. nt.This exploit doesn't countIf the exploit was created by security researchers, it doesn't count.Cue the double standards...It's called "Proof of concept".Originally classified as "Denial of Service", it is now proved to be wormable in every version of Windows currently on the market.But feel free...

Tags: Microsoft Windows Vista (Longhorn), Apple Mac OS X, Operating systems, NonZealot, TODAY XP, Microsoft Windows Vista, Microsoft Windows

Discussion threads 2009-09-17

iPhone, QuickTime bitten by security bugs

Ryan, can you explain that? [was: Liars! This is Teh Unpossible!!]Wonder why these have not been tagged with the word "gaping" in the title? Weird.Does QuickTime have any secure code in it?I must say that I'm impressed with how many gaping security holes Apple has managed to cram into a...

Tags: Patches, Operating systems, Apple QuickTime, Apple iPhone, security bug, Apple Inc., vulnerability, security, Microsoft Windows

Discussion threads 2009-09-09

Microsoft confirms SMB2 vulnerability, warns of code execution risk

Feel free to delete this Ryan.ThanksIsn't it about time we stop playing nice andfind these people who create such an endless stream of blank and do a bit of Vlad the Impaler on them? Catch em... give them a fair trial (I want to be certain we publicly impale...

Tags: Microsoft Windows Vista (Longhorn), SECURITY, Microsoft Corp., SMB2, Microsoft Windows Vista, vulnerability, beta

Discussion threads 2009-09-09