Go To Latest Video ReviewsVista Blown Open By Unstoppable Hack
| Author | Gordon Kelly |
| Published | 10th Aug 2008 |
16 comments
Email this to a friend
TrustedReviews NewslettersExpect that chairs to be flying over at Microsoft HQ about this...
Search Security reports during a charged presentation at the Black Hat hacking conference last week Mark Dowd of IBM Internet Security Systems (ISS) and Alexander Sotirov of VMware Inc revealed a fatal flaw in Windows Vista which potentially blows the OS wide open and in such a way that it cannot be fixed.
Their method involves using scripting systems such as Java and elements of the .NET framework to run malicious code. This code attacks Vista's Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP) technologies and allows the hackers to load any content they desire to any location on a user's machine.
"The genius of this is that it's completely reusable," said Security specialist Dino Dai Zovi to Search Security. "They have attacks that let them load chosen content to a chosen location with chosen permissions. That's completely game over. "What this means is that almost any vulnerability in the browser is trivially exploitable."
Naturally enough the entry method of choice is through Internet Explorer but it is not limited to this. The approach can also potentially be applied to other operating systems such as Windows XP and Mac OS X.
Unsurprisingly Microsoft has yet to comment on this as it no doubt takes a long hard look at Dowd and Sotirov's findings. Of course these are likely to go public soon so expect this to be a red hot topic over the comings months.
Feeling safe...?
Related Articles
Newsletters
Register to receive the latest Reviews and News Headlines directly to your Inbox every day, and enter our regular competitions. More Info.
Latest 4 of 16 Comments
Have your say: Leave a comment below about this article.
dworvos said on 11th August 2008
Azro said on 12th August 2008
Alex Sotirov responds to Ed Bott's ZDnet's blog: "Thanks for your blog post about our research. I was horrified by the lack of understanding displayed by the tech p... more
Stephen Allred said on 12th August 2008
@dworvos
Did I say OSX didn't use the No eXecute (or eXecute Disable, as Intel have decided to market it) bit? No. I said OSX doesn't use the Vista's (and b... more
Chani Tough said on 13th August 2008
Windows are a pane
See all 16 comments on this article.
Add your comment
You must be logged in to comment. Login or register here.
@Stephen Allred
Data Execution Prevention (DEP) is a good thing if used correctly (which is supported at the hardware level by a XD bit), the fact that OS X doesn't use... more