Microsoft patches critical hole in Windows kernel
Microsoft on Tuesday issued six security bulletins fixing 15 vulnerabilities, including a critical patch for holes in the Windows kernel and other Windows and Office components that could allow an attacker to take control of a computer.
The critical bulletin affecting the Kernel-Mode Drivers was publicly disclosed and could be used to create a Web page with malware designed to exploit the hole on systems that visit the page, Microsoft said in a blog posting.
"MS09-065, a bug in the Windows kernel, is this month's most serious issue," said Andrew Storms, director of security operations at nCircle. "The vulnerability allows for remote code execution, and the attack code can be embedded inside MS Office files or be hosted on websites. Simply browsing an infected website will compromise unsuspecting users -- not great for all the holiday shoppers looking to get a jump on their shopping. The novelty value of this bug is likely to attract many researchers. A lot of people will try to be the first to publicly post exploit code."
The two other critical bulletins fix holes in Web Services on Devices API and in License Logging Server. Two bulletins ranked "important" fix holes that pose risk of remote code execution if a user opened a maliciously crafted Excel or Word file.
"It is interesting that a new service that helps with the 'user experience' can cause so much harm," said Jason Miller, data and security team leader at Shavlik Technologies. "The WSDAPI service allows users to easily find devices such as printers and cameras on their network. This vulnerability is also not publicly known at this time."
Software affected by the patches includes Windows 2000, XP, Server 2003, Vista, Server 2008, Office XP, Office 2003, 2007 Microsoft Office System, Office 2004 for Mac, and Office 2008 for Mac, according to the bulletin.
Meanwhile, the Microsoft Malware Protection Center team added two rogue antivirus families to the Malicious Software Removal Tool -- Win32/FakeVimes, which calls itself "Windows System Defender" and "Windows Enterprise Suite," and Win32/PrivacyCenter, which calls itself "Safety Center."
Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor. 
Windows 7 is virus proof! Stop this conspiracy to bring down mighty '7
(Apple did this!)
But don't worry, OS X 10.6.3 won't have any of the problems that 10.6.2 had... that 10.6.1 had... that 10.6 had... that... Do you see the trend here?
It's an OS. It's far better that patches are released in the first place.
It's funny you should say that ubuntu.com is the solution. My ubuntu box has problems now connecting to their update server and still needs patching. The update service has been timing out for some reason. I'll let it run overnight and it should ideally get done.
You need to find the right Server for you. For example, I had problems like you. However, I changed my server to India (I am in India) and now updates are super fast & super smooth.
Good luck!
I think the point is that one of the common Mac OS fanboy talking points is that the size of OS updates is an indicator of how poorly done the OS is.
The doublestandard in play is that when the very same issues/criteria happens with the Mac, then Apple is held to a different standard by those very same fans.
I think the phrase, "Do as I say, not as I do," fits it best.
- by Gayle Edwards November 15, 2009 9:01 AM PST
- I find it kind of strange that the "Windows-7" kernel isn't affected, since "both "Vista", and "Server 2008" are vulnerable (and, "Windows-7" actually contains so much of the same code"). Perhaps, "Windows-7" actually does have this same "kernel vulnerability", and Microsoft has simply chosen to far more quietly (for marketing, and PR, purposes) patch this bug in "Windows-7" without admitting that their new flagship-OS ("Vista-2.0"... which they are desperately-pushing so hard) IS indeed ...just the same old story from Microsoft.
- Like this Reply to this comment
-
-
- by superswiss November 16, 2009 9:03 PM PST
- Not strange at all. Windows 7 and Vista/Server 2008 don't share the same kernel nor do they have the same core. The Windows 7 kernel is an evolution of the Vista/Server 2008 kernel and the core in Windows 7 is commonly referred to as MinWin. While Vista started to go down the route of MinWin, Windows 7 is the first OS that is built on top of MinWin. Significant rewrites happened to arrive at MinWin, so it's not surprising that kernel vulnerabilities are not present in Windows 7.
- Like this
-
- by Gayle Edwards November 17, 2009 5:05 PM PST
- Clear as mud...
- Like this
-
(40 Comments)Or, perhaps... if this "vuln" DOES exist in "Windows-7"... maybe Microsoft can't (or has, once again, simply decided not to) fix it immediately. It will be interesting to see what independent researchers (and "hackers") find out in this regard.
"Windows-7" is an "evolution" of the "Vista/Server-2008" kernel... containing "...significant ...rewrites". However, AS an "evolution" (and despite the... ahem... .MS "code-reviews"), "Windows-7" DOES contain significant ...one might almost say, staggering, even -deceptive-) amounts of earlier ("Vista") code AND OS/kernel-elements. And, in fact "Windows-7" HAS already, actually, begun to show identical flaws and bugs, inherited from its "code-base's" (MS-evolutionary) origin. Check the tech-news.
Just sayin'...