PC Pals Forum

Technical Help & Discussion => Windows PCs & Software: Help, News & Discussion => Topic started by: Rik on November 25, 2010, 09:47

Title: New major security scare for Windows
Post by: Rik on November 25, 2010, 09:47
El Reg (http://www.theregister.co.uk/2010/11/24/windows_0day_report/) reports that:

Quote
Antimalware provider Prevx has sounded the alarm about a serious vulnerability in fully patched versions of Microsoft Windows. It allows attackers to execute malware, even in versions designed to withstand such exploits.

Technical details have already been published on a Chinese forum, leading to speculation that it won't be long before attackers exploit it in the wild.

“This could potentially become a nightmare due to the nature of the flaw,” Prevx researcher Marco Giuliani wrote here. “We expect to see this exploit being actively used by malwares very soon – it's an opportunity that malware writers surely won't miss.”

The flaw resides in the win32k.sys part of the Windows kernel and results from an API known as NtGdiEnableEUDC that fails to properly vet user input for harmful content. Attackers can exploit the bug to redirect overwritten return memory addresses to malicious code, which is then executed with kernel mode privileges. As a result, the flaw allows even users or processes with limited privileges to execute code will elevated rights.

“Being a privilege escalation exploit, it bypasses by design even the protection given by the User Account Control technology implemented in Windows Vista and Windows 7,” Giuliani said. “All Windows XP/Vista/7 both 32 and 64 bit are vulnerable to this attack.”

Microsoft "is aware of the issue and it is under investigation," according to a statement, which a spokeswoman attributed to Jerry Bryant, Group Manager of the company's Response Communications.

Bring back the BBC Micro!
Title: Re: New major security scare for Windows
Post by: Simon on November 25, 2010, 10:15
:bawl:
Title: Re: New major security scare for Windows
Post by: Rik on November 25, 2010, 10:27
Exactly.
Title: Re: New major security scare for Windows
Post by: Clive on November 25, 2010, 11:09
And today Sky News claims that criminal gangs have got hold of Stuxnet and which may shut down power stations and hospitals.  This is very bad news for all of us.   :bawl:
Title: Re: New major security scare for Windows
Post by: Simon on November 25, 2010, 13:23
:eeek:
Title: Re: New major security scare for Windows
Post by: davy51 on November 25, 2010, 14:29
And today Sky News claims that criminal gangs have got hold of Stuxnet and which may shut down power stations and hospitals.  This is very bad news for all of us.   :bawl:


go get a 12 gauge shotgun for all the law abiding people
Wouldnt take long to open them back up
Title: Re: New major security scare for Windows
Post by: sam on November 25, 2010, 14:30
And today Sky News claims that criminal gangs have got hold of Stuxnet and which may shut down power stations and hospitals.  This is very bad news for all of us.   :bawl:

Sky News = Fox News = scaremongering w**kers
Title: Re: New major security scare for Windows
Post by: sam on November 25, 2010, 14:31
go get a 12 gauge shotgun for all the law abiding people

"on a road from Canada - welcome to the USA, have you brought your gun?"  :devil:
Title: Re: New major security scare for Windows
Post by: davy51 on November 25, 2010, 14:46
"on a road from Canada - welcome to the USA, have you brought your gun?"  :devil:


LOL

Its called a safety measure against thugs and criminals lol
Title: Re: New major security scare for Windows
Post by: Rik on November 25, 2010, 16:00
Does that include all politicians?  :o:
Title: Re: New major security scare for Windows
Post by: davy51 on November 25, 2010, 17:22
Well Rik according to our constitution that was the idea of allowing the people to have guns to protect themselves from a Govt that decided we couldn't be free


They believed an armed society was a free society
Title: Re: New major security scare for Windows
Post by: Rik on November 25, 2010, 17:25
And yet the system still produces a Palin. ;)
Title: Re: New major security scare for Windows
Post by: davy51 on November 25, 2010, 21:45
All country's make mistakes every now and then lol

You can have her if you want her
Title: Re: New major security scare for Windows
Post by: sam on November 26, 2010, 05:45
she's a big friend of Kim Jong-il so I'd send her on a fact finding mission  :)x
Title: Re: New major security scare for Windows
Post by: Rik on November 26, 2010, 10:57
All country's make mistakes every now and then lol

You can have her if you want her

Was that in the biblical sense? ;D
Title: Re: New major security scare for Windows
Post by: davy51 on November 26, 2010, 14:08
Was that in the biblical sense? ;D


All I can say is if she immigrates we would be better off
Title: Re: New major security scare for Windows
Post by: Rik on November 26, 2010, 15:49
A belated happy Thanksgiving, Davy. :) Shall we say North Korea?
Title: Re: New major security scare for Windows
Post by: davy51 on November 26, 2010, 21:41
happy  thanksgiving to you to rik
Even though you dont really celebrate it
Title: Re: New major security scare for Windows
Post by: Rik on November 27, 2010, 10:29
I'd be interested to know what a typical Thanksgiving menu is, Davy, compared to Christmas Day (when we mainly eat turkey).
Title: Re: New major security scare for Windows
Post by: davy51 on November 27, 2010, 13:53
For me Rik it usually is and most people do the same


Roasted turkey
Baked Ham(glazed)
Bread Stuffing( cornbread or white bread)
mashed potatoes
Turkey gravy
Sweet potatoes
peas
Green beans
jellied cranberry sauce

and for desert

Pies
Apple
pumpkin
blackberry
sweet potatoe pie
banana pudding


for Christmas I usually do about the same
Of course I live alone and mainly do it for my girfriend and a few of my family
Title: Re: New major security scare for Windows
Post by: Simon on November 27, 2010, 14:33
Can we come, Dave?   :D
Title: Re: New major security scare for Windows
Post by: Clive on November 27, 2010, 14:57
Sounds lovely Dave.  I'm very fond of sweet potato.   8-)
Title: Re: New major security scare for Windows
Post by: davy51 on November 27, 2010, 15:13
Can we come, Dave?   :D

come ahead clive
of corse it will be cold leftovers by the time you get here  :laugh:


I make a real butter sauce to top my sweet potatoes with a grand dish in itself
Title: Re: New major security scare for Windows
Post by: Rik on November 27, 2010, 16:13
Do Americans not make roast potatoes as we do here, Dave, I've never seen them, it always seems to be mash.
Title: Re: New major security scare for Windows
Post by: sam on November 27, 2010, 19:13
they do roast potatoes in Canada... but normally of the sweet potato kind.

For thanksgiving (US) last year we had curry, I was in Puerto Rico (which is of course a US territory) with astronomers - and astronomers love indian food.

As for Canadian thanksgiving this year (which is of course earlier):

Turkey, mashed potatoes, cranberries, veg and some cheese thing (which was made for me cause I don't eat the first thing on the list). Wa yummy.
Title: Re: New major security scare for Windows
Post by: Rik on November 27, 2010, 19:18
You should pop round while you're home, Sam, I'm sure Sue could come up with something suitable. ;)
Title: Re: New major security scare for Windows
Post by: davy51 on November 27, 2010, 20:12
we do roast or bake potatoes rik
I usually have one with a steak

I like mine with butter but many like them with sour cream and chices
Title: Re: New major security scare for Windows
Post by: sam on November 27, 2010, 20:44
You should pop round while you're home, Sam, I'm sure Sue could come up with something suitable. ;)

Well t'other one wants me eating meat.... so suitable is never approved off  ;)
Title: Re: New major security scare for Windows
Post by: Rik on November 28, 2010, 11:15
 ;D
Title: Re: New major security scare for Windows
Post by: Rik on November 28, 2010, 11:16
we do roast or bake potatoes rik
I usually have one with a steak

I like mine with butter but many like them with sour cream and chices

Thanks, Dave, I just never seem to see them on US programmes featuring food, so I wondered if they were peculiar to us.
Title: Re: New major security scare for Windows
Post by: davy51 on November 28, 2010, 14:26
Thanks, Dave, I just never seem to see them on US programmes featuring food, so I wondered if they were peculiar to us.

Your Welcome Rik

the movies have a tendency not to show life as it is
Many foods we eat are the same as yours just called by a different name
Title: Re: New major security scare for Windows
Post by: Rik on November 28, 2010, 16:07
Two nations divided by a common language, eh? ;)
Title: Re: New major security scare for Windows
Post by: Simon on November 28, 2010, 16:40
Not to mention a drop of water...
Title: Re: New major security scare for Windows
Post by: Rik on November 28, 2010, 16:43
Bloody big drop. ;D
Title: Re: New major security scare for Windows
Post by: Simon on November 28, 2010, 17:15
;D
Title: Re: New major security scare for Windows
Post by: davy51 on November 28, 2010, 17:40
 ;D